Privacy Policy Bones88 — Malaysia User Data Protection

1. Introduction

Welcome to the bones88 Privacy Policy. This document describes the privacy practices of the bones88 platform ("we", "Platform") regarding the collection, use, disclosure, and protection of your personal information when you use the website, mobile app, or any services offered by bones88.

This Privacy Policy applies to all bones88 users in Malaysia, including website visitors, prospective members, registered members, and any individual who interacts with our platform in any capacity.

By using the bones88 platform, you consent to the collection and use of your personal information as described in this Privacy Policy. If you do not agree, please stop using our platform.

2. Personal Information We Collect

Bones88 collects various types of personal information depending on how you interact with our platform. Below are full details of the information we collect:

Information you provide directly:

• Full name as shown on official identification documents.
• Identity card number (MyKad) or passport number for KYC identity verification.
• Date of birth for age verification.
• Email address and mobile phone number.
• Bank account details for withdrawal processing.
• KYC supporting documents such as a copy of your MyKad and recent bank statement.

Information collected automatically:

• IP address and general geographic location.
• Device information including browser type, operating system, and screen resolution.
• Platform activity data includes pages visited, play time, and wagering history.
• Financial transaction history within the platform.
• Session logs including login and logout times.

3. How We Use Your Information

Bones88 uses collected personal information solely for legitimate purposes as outlined below. We will not use your data for any other purpose without obtaining fresh consent from you:

• Account management: Creating and maintaining your account, processing registration, and verifying your identity through the KYC process.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions in your bones88 account securely and efficiently.
• Customer service: Responding to inquiries, resolving complaints, and providing technical assistance across all support channels.
• Platform security: Detecting and preventing fraudulent activity, money laundering, and platform abuse.
• Legal compliance: Fulfilling applicable legal and regulatory obligations, including anti-money laundering (AML) reporting requirements.
• Product improvement: Analysing usage patterns to improve user experience, enhance platform features, and develop new services.
• Marketing communications: Sending promotional information, bonus offers, and platform updates — only to users who have consented to receive marketing communications.

4. Information Sharing & Disclosure

Bones88 treats your personal information as confidential. We do not sell or transfer your data to third parties for their own marketing purposes. However, there are limited situations where we may need to share your information:

• Service providers: Third parties involved in the operation of our platform — such as payment processors, cloud infrastructure providers, and analytics service providers — are all bound by strict confidentiality agreements.
• Legal compliance: When required by court order, regulatory authority directive, or applicable law, including AML investigations and tax legislation.
• Identity verification: With approved third-party identity verification service providers for KYC purposes only.
• Business transfers: In the event of a company merger, acquisition, or asset sale, users will be notified in advance.

5. Cookies & Tracking Technologies

Bones88 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functionality such as login sessions and security. Cannot be disabled.
• Preference Cookies: Saving your preferences such as language and display settings to ensure a more personalised experience.
• Analytics Cookies: Helping us understand how users interact with the platform for continuous improvement.
• Marketing Cookies: Used to display relevant advertisements and promotions based on your interests — activated only with your consent.

You can manage cookie settings through your browser. Disabling certain cookies may affect the functionality of some parts of the platform.

6. Data Security Measures

Bones88 implements a range of technical and organisational security measures to protect your personal information from unauthorised access, loss, misuse, or disclosure:

• 256-bit SSL data encryption for all communications between the platform and users.
• Use of multi-layer firewalls and intrusion detection systems to protect server infrastructure.
• Two-factor authentication (2FA) is available for all user accounts as an added layer of protection.
• Regular security audits conducted by independent third-party cybersecurity firms.
• Ongoing staff training on data security best practices and user privacy.
• Strict access controls — staff can only access data relevant to their specific role.

7. Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal information held by bones88:

To exercise any of the above rights, please contact the bones88 customer support team via live chat. We will process your request within 14 business days.

8. Children's Data Protection

The bones88 platform is unsuitable and strictly prohibited for individuals under the age of 18. We do not knowingly collect personal information from minors.

If we discover that personal information of a minor has been collected without our knowledge, we will take immediate action to delete that information and close the account in question.

9. International Data Transfers

As an online platform, bones88's infrastructure may involve storing or processing data outside Malaysia in limited circumstances, such as the use of international cloud services with data centres in various countries.

When international data transfers take place, bones88 ensures that:

• The recipient country or organisation provides a level of data protection equal to or higher than that required in Malaysia.
• A valid and binding data transfer agreement has been established between bones88 and the data recipient.
• All appropriate technical security measures are implemented to protect data during transfer and storage.

10. Changes to This Privacy Policy

Bones88 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or service improvements.

When significant changes are made:

• A notice will be sent to your registered email address at least 14 days before the changes take effect.
• A notification will be displayed within the bones88 platform when you log in.
• The "Updated" date at the top of this document will be updated to reflect the date of the latest revision.

Continued use of the bones88 platform after the effective date of any changes constitutes acceptance of the updated Privacy Policy.

11. Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal information, please contact the bones88 privacy team via:

• Live Chat: Available 24/7 on the bones88 platform — the fastest way to get a response.
• Email: [email protected] — for privacy-related enquiries and data access requests.
• Response time: We are committed to responding to all privacy inquiries within 14 business days of receipt.