Privacy Policy bolaslot — Your Data Protection is Our Priority

Introduction – Who We Are and Why Privacy Matters

Bolaslot is an online betting platform operating in Malaysia, built on a foundation of player trust. We understand that when you register and provide your personal information, you are entrusting us with something of real value.

This Privacy Policy is written in plain language so that Malaysian players can understand it clearly, without having to interpret complex legal terminology. We believe transparency is the foundation of trust – and your trust is something we never take for granted.

Bolaslot operates in full compliance with Personal Data Protection Act 2010 (PDPA) Malaysia. This means we have clear legal obligations regarding how your data is handled, and we take those obligations seriously.

This document applies to all players using Bolaslot's services, including Malaysia Super League and EPL football betting, online slots, baccarat, lottery, jackpot, cricket, badminton, e-sports, and all other services we offer from time to time.

Types of Personal Data We Collect

Bolaslot collects various types of data when you use our platform. Below is a detailed explanation of what we collect and why:

A. Data You Provide Directly

• Registration information: Your full name, Malaysian phone number, email address, and date of birth as provided when opening your Bolaslot account.
• Identity verification documents: A copy of your Malaysian Identity Card (MyKad) or passport, requested during the KYC process for withdrawals exceeding a certain limit.
• Financial information: E-wallet account details such as your registered Touch 'n Go, GrabPay, Boost, ShopeePay, or DuitNow phone number, or FPX bank account (Maybank2u, CIMB Clicks) for payment and withdrawal purposes.
• Support communications: Any messages, enquiries, or complaints you submit to the bolaslot customer support team.

B. Data Collected Automatically

• Usage data: The games you play, bet amounts, winnings, losses, and activity patterns within the bolaslot platform.
• Technical data: IP address, device type, operating system, web browser, and screen resolution, collected for security purposes and platform optimisation.
• Cookie data: Login session information, language preferences, and display settings that help us deliver a more personalised experience.
• Approximate location data: Your city or state based on IP address, for geo-compliance and account security purposes.

How Bolaslot Uses Your Data

Every piece of data bolaslot collects is used for a clear and legitimate purpose. Below is a full explanation of each use:

• Account management and services: Enables you to log in, make deposits and withdrawals, enjoy games, and access all features on the bolaslot platform.
• Identity verification and security: Ensuring only authorised players can access their accounts, detecting unauthorised login attempts, and safeguarding your account balance.
• Financial transaction processing: Verifying deposits via DuitNow, Touch 'n Go, GrabPay, Boost, and FPX, as well as processing withdrawals to your Malaysian e-wallet or bank account.
• Service communications: Sending important notifications such as deposit confirmations, lottery draw result reminders, account security updates, and customer support responses.
• Platform improvements: Analysing usage patterns in aggregate (not at an individual level) to improve platform performance, introduce new features, and enhance the overall user experience.
• Legal compliance: To meet PDPA 2010 legal requirements, report suspicious activity to Bank Negara Malaysia where required, and comply with any directives issued by lawful authorities.
• Marketing communications: Sending information about promotions, bonuses, and new offers — only to players who have opted in to receive them. You may unsubscribe at any time.

Sharing Data with Third Parties

Bolaslot does not sell your data. However, in normal operations, there are situations where data may need to be shared with certain parties:

Technical Service Providers (Sub-Processors)

We work with a select group of third-party technology companies to operate parts of our infrastructure – including payment processing, server hosting, and anti-fraud systems. All such providers are bound by strict confidentiality agreements and are only permitted to use data for the specified purposes.

Lawful Authorities

Bolaslot will share data where required by Malaysian law or in the course of a legitimate criminal investigation — including requests from Bank Negara Malaysia, PDRM, or relevant enforcement authorities. We will not disclose data beyond what is legally required.

In the Context of a Business Transfer

In the event of a merger, acquisition, or sale of bolaslot's assets, player data may be transferred to the new entity. Players will be notified in advance and given the option to close their account if they do not agree.

Security & Data Protection

Bolaslot invests seriously in security technology and procedures to keep your data safe at all times:

• 256-bit SSL Encryption: All data transmitted between your device and bolaslot's servers is encrypted using the highest industry security standards.
• Database encryption: Sensitive data such as IC numbers and payment details are stored in encrypted form within our database — even Bolaslot staff cannot view the actual values.
• Two-factor authentication (2FA): An additional security option that requires OTP verification via your Malaysian phone number each time you log in from a new device.
• 24/7 Monitoring: A threat detection system that runs around the clock to identify any suspicious activity, intrusion attempts, or anomalies in account access patterns.
• Regular security audits: Penetration testing and independent security audits are conducted regularly by qualified third parties.
• Staff access controls: Only staff who genuinely require access to specific data are granted permission, with strict access logging and monitoring systems in place.

While Bolaslot takes all reasonable steps to protect your data, no system is 100% immune to cyber threats. We encourage players to take their own security precautions, such as using strong passwords and keeping their login credentials private.

Cookies and Tracking Technologies

Bolaslot uses cookies and similar technologies to enhance your experience on the platform. Below is an explanation of the cookie types we use:

You can manage cookie settings through your web browser. Please note, however, that disabling certain cookies may affect the functionality of the bolaslot platform — particularly session cookies required to stay logged in.

Player Rights Regarding Personal Data

As a registered Bolaslot player in Malaysia, you have the following rights regarding your personal data under PDPA 2010:

To exercise any of the above rights, contact Bolaslot's privacy team at support@bolaslot.wine with the email subject line "Privacy Request". All requests will be processed within 14 working days at no charge.

Child Data Protection

Bolaslot is a platform for adults aged 18 years and above only. We do not knowingly collect or process personal data of individuals under the age of 18.

Should we discover that data belonging to a minor has been collected — whether through a false registration or by any other means — we will delete that data immediately and close the account in question.

Data Retention Period

Bolaslot does not store your data indefinitely. Below is a guide to data retention periods by category:

• Active account data: Retained for as long as your account is active on bolaslot, plus a 5-year period after closure for audit and legal compliance purposes.
• Financial transaction records: Retained for 7 years in accordance with Malaysia's accounting and anti-money laundering legal requirements.
• Security logs: Retained for 12 months for security incident investigation purposes if required.
• KYC document data: Retained for the duration of the active account period, plus 5 years after account closure.
• Support communication data: Retained for 2 years from the date of communication for reference and service improvement purposes.
• Marketing data: Deleted within 30 days after you submit your unsubscribe request.

Once the retention period expires, data will be securely deleted or permanently anonymised so that it can no longer be linked back to you.

Amendments to This Privacy Policy

Bolaslot reserves the right to amend this Privacy Policy from time to time to reflect changes in law, technology, or our operational practices:

• Changes material that materially affects player privacy rights will be notified at least 14 days before taking effect via in-platform notifications and your registered email.
• Minor changes such as corrections and clarifications may take effect without separate notification.
• The latest update date is always displayed at the top of this document.
• Continued use of the Bolaslot platform after any amendments take effect will be considered as acceptance of the new policy.

Contact Our Privacy Team

If you have any questions, concerns, or requests regarding the Privacy Policy or your personal data at Bolaslot, we are here to help:

Our team will respond to privacy enquiries within 3 business days. For data rights requests, the processing time is up to 14 working days. We communicate in Bahasa Melayu and will ensure you receive a clear and satisfactory response.