Bonus888 Privacy Policy – Our Commitment Protecting Malaysian Players' Data

This Privacy Policy document explains how bonus888 collects, uses, stores, and protects the personal information of members and visitors to our platform. We are committed to safeguarding the privacy of every individual who uses the services of bonus888.

This policy applies to all information collected through the bonus888.express website, mobile app, email communications, Live Chat and any other interactions with the platform bonus888. By registering for or using our platform, you agree to the collection and use of information as described in this document.

bonus888 collects various types of information depending on how you interact with our platform. We collect only what is necessary — nothing more. Below are the main categories of information we gather.

1.1 Information You Provide Directly

• Registration information: Full name, Malaysian phone number, email address and account password during the new member registration process.
• Identity verification information (KYC): MyKad number, MyKad copy (front and back), facial photo, and latest bank statement — required for first-time withdrawals or amounts exceeding certain thresholds.
• Financial information: Payment method details, including Touch 'n Go e-wallet account numbers, DuitNow, GrabPay, Boost, ShopeePay, or bank account numbers for FPX (Maybank2u, CIMB Clicks). Note: bonus888 does not store credit or debit card numbers directly.
• Communications: Live Chat conversation records, support emails and any other written communications with our team.

1.2 Information Collected Automatically

• Device data: Device type, operating system, phone model, screen resolution, and unique device identifier.
• Network data: IP address, internet service provider (ISP), and general geographic location (city/state only, not exact address).
• Platform usage data: Pages visited, games played, session duration, in-game actions, betting records, and winnings.
• Cookie data: Login session information, language preferences and platform settings stored via browser cookies.

bonus888 use collected information only for specific, legitimate purposes. We do not use your data for any other purpose without informing you in advance and – where required – obtaining your consent.

2.1 Primary Purposes of Data Use

• Account management: Creating, verifying, and maintaining your member account, as well as processing secure logins.
• Transaction processing: Processing deposits and withdrawals via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX accurately and securely.
• Gaming service provision: Provides access to all games – slots, blackjack, poker, lottery, Sports Betting (including Malaysia Super League, EPL and Badminton) and Live Casino – and records all gaming activity for fairness and dispute resolution purposes.
• Customer support: Handle member enquiries, complaints and assistance requests more effectively.
• Security & fraud prevention: Identifying and preventing fraudulent activity, money laundering, multiple account usage, and any violations of our terms of use.
• Legal compliance: Meet obligations under Malaysian law, including the Personal Data Protection Act 2010 (PDPA) and financial reporting requirements.
• Service communications: Sending important notifications regarding your account, transactions, changes to our terms, and promotions you have agreed to receive.
• Platform improvements: Analysing usage patterns in aggregate (not at an individual level) to improve user experience, platform stability, and game offerings.

Data security is our greatest investment bonus888 in building member trust. We employ multiple layers of technical and organisational security controls to protect your information against unauthorised access, loss, alteration or disclosure.

3.1 Technical Security Measures

• Data encryption in transit: All communications between your device and bonus888's servers are secured with TLS 1.3 protocol using AES-256 encryption — the same standard used by leading financial institutions.
• Stored data encryption: Sensitive data including passwords (stored as bcrypt hashes), bank account numbers and financial details are encrypted at rest.
• Secure server infrastructure: Data is stored in data centres with multi-tier physical security, daily backups and disaster recovery systems.
• 24/7 security monitoring: An intrusion detection system (IDS) continuously monitors all network activity and immediately alerts the security team whenever anomalies are detected.
• Two-factor authentication (2FA): Available to all member accounts and mandatory for withdrawal transactions above a specified amount.

3.2 Internal Access Controls

Access to member personal data within internal systems bonus888 is restricted to staff who require access to carry out their specific duties (principle of least privilege). All access is logged and regularly audited. Staff undergo data protection training upon onboarding and are required to adhere to strict confidentiality policies.

bonus888 does not sell, rent, or trade members' personal data to any third party for their own commercial or marketing purposes. This is our absolute commitment. However, there are specific situations where limited data sharing is necessary in order to deliver our services.

4.1 Authorised Service Providers

We share only the necessary information with selected third-party service providers who assist us in operating our platform, including:

• Payment processors: Payment gateway providers for Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay and FPX to process your transactions. Only the information necessary to complete a transaction is shared.
• Game providers: Companies such as NetEnt, Microgaming, Playtech, and Big Time Gaming provide slots, table games, and live casino titles. They receive only the game data necessary to operate, not your full personal information.
• Identity verification services: Registered and licensed third-party KYC providers that assist in verifying identity documents during the account verification process.
• Cloud infrastructure: Cloud service providers for server hosting and data backup. All contracts include strict data protection clauses.

All third-party service providers we work with are bound by data protection agreements that prohibit them from using your information for any purpose other than delivering the contracted services.

4.2 Legally Required Disclosures

bonus888 may be required to disclose your personal information to authorities where mandated by Malaysian law — for example, to the Royal Malaysia Police (PDRM), the Securities Commission, or a court upon receipt of a valid order. In such cases, we will disclose only what the law requires and, where permitted, will inform you of the request.

Platform bonus888 use cookies and similar tracking technologies to enhance the user experience, maintain session security and understand how our platform is used. This section explains the types of cookies we use and how you can manage them.

5.1 Types of Cookies Used

• Essential cookies: Required for the platform to function properly. This includes login session cookies, security tokens, and language preferences. These cannot be disabled without affecting platform functionality.
• Preference cookies: Saving your personal settings such as display language, last bet size, and favourite games for a more comfortable experience.
• Analytics cookies: Collects aggregated, anonymised usage data to help us understand how the platform is used and identify areas for improvement. This data is not linked to your personal identity.
• Security cookies: Helps identify unauthorised access attempts, bot activity and fraud by analysing session behaviour patterns.

5.2 Managing Cookies

You can manage or delete cookies through your browser settings. Please note that disabling essential cookies will affect your ability to log in and use the platform bonus888 in full. For guidance on managing cookies in popular browsers, refer to your respective browser's help section.

As a member bonus888, you hold certain rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA). bonus888 fully respects these rights and provides a straightforward process for you to exercise them.