Data Protection

Privacy Policy Bola99 – Your Data Security, Our Priority

Bola99 takes seriously every piece of information you entrust to us. This privacy policy clearly explains what we collect, how we use it, who can access it, and what your rights are as the owner of that data.

Updated: 1 January 2026  |  Version 3.1
Quick Summary: We collect only what is necessary, protect it with 256-bit SSL encryption, never sell your data to anyone, and you can request deletion of your data at any time.

Bola99's Six Data Protection Principles

Our approach to privacy goes beyond legal compliance – it is a core value in how we operate every day.

Minimum Data Collection

Bola99 only collects information genuinely necessary to provide platform services to you. We do not engage in excessive data collection or collect data irrelevant to your account operations.

High-Level Encryption

All data transmitted between your device and bola99 servers is protected with 256-bit SSL encryption – the same standard used by financial institutions and major banks in Malaysia.

No Data Selling

Bola99 has never and will never sell, rent, or trade your personal data to any third party for marketing or commercial purposes without your explicit consent.

Strict Access Controls

Only authorised bola99 staff with a legitimate business need may access players' personal data. All access is logged and periodically audited by our internal security team.

Full Player Rights

You have the right to access, correct, transfer, or request deletion of your personal data at any time. Requests will be processed within 30 days of receipt.

Limited Retention Period

Your personal data is retained only for as long as necessary to fulfil the purpose of collection or as required by law. After that, data is securely deleted.

Bola99's Commitment: We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards. This policy outlines the rights and protections you have as a bola99 platform user.

1. Introduction

Bola99 ("we", "Platform" or "bola99") values the privacy of every user who entrusts us with their personal information. This Privacy Policy explains our practices regarding the collection, use, storage, and protection of your personal data when using the bola99 platform.

This document applies to all bola99 services, including the website at bola99.fun, the mobile app for Android and iOS, and any services we provide through third-party platforms integrated with our system.

By registering an account or using any bola99 service, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use our platform.

2. Types of Data We Collect

Bola99 collects your personal data through several means — directly when you register, during platform use, and automatically through standard web technologies.

2.1 Data You Provide Directly

Data Type Example Primary Purpose
Identity Information Full name, date of birth, MyKad number KYC & Age Verification
Contact Information Email, phone number, address Communications & Support
Financial Information Bank account number, bank name Deposit & Withdrawal
KYC Documents MyKad copy, bank statements Identity verification

2.2 Automatically Collected Data

  • Technical data: IP address, browser type, operating system, screen resolution
  • Usage data: Pages visited, time spent, in-game actions
  • Approximate location data: Country and region based on IP address (not precise GPS location)
  • Device data: Unique device ID, hardware information for 2FA verification

3. How We Use Your Data

Every piece of data collected by bola99 is used for a specific, legitimate purpose. We do not use your data beyond what is stated without your prior consent.

  • Service delivery: To allow you to log in, make deposits, play games, and make withdrawals
  • Identity verification: To keep your account secure and meet mandatory KYC requirements
  • Fraud prevention: To detect and block suspicious activity or breaches of terms
  • Service communications: To send transaction notifications, security updates, and customer support responses
  • Marketing (with consent): To inform you about relevant bola99 promotions if you have consented to receive them
  • Platform improvements: To analyse usage data in aggregate (not individually) to improve the user experience
  • Legal compliance: To fulfil anti-money laundering (AML) reporting obligations and other legal requirements
Marketing Unsubscribe: You can opt out of bola99 marketing emails at any time via the "Unsubscribe" link in any email or through your account settings. This will not affect essential service communications.

4. Data Sharing & Disclosure

Bola99 does not sell your personal data. We only share data in the following limited circumstances:

  • Service providers: Payment partners (DuitNow, FPX, digital wallets) that process your transactions – subject to strict confidentiality agreements
  • Game providers: Minimum account information required to provide access to games from leading providers such as Pragmatic Play and Evolution Gaming
  • Legal requirements: When required by authorities or a court under applicable legal provisions
  • Rights protection: Where necessary to enforce our terms and conditions, prevent fraud, or protect the safety of other users

In all cases of third-party data sharing, bola99 ensures that recipients are bound by data protection agreements equivalent to or stricter than our own policy.

5. Data Security

Bola99 implements comprehensive technical and organizational security measures to protect your personal data from unauthorized access, loss, or misuse:

  • 256-bit SSL encryption: All data transmitted between you and bola99 servers is encrypted using the latest TLS 1.3 protocol
  • Encrypted data storage: Sensitive data such as identification numbers and banking information is stored in encrypted form in our database
  • Role-based access controls: Only authorised staff with a demonstrated business need may access player data
  • 24/7 Monitoring: A cyber threat monitoring system operates around the clock to detect intrusion attempts
  • Regular security audits: Penetration testing and security audits are conducted regularly by accredited third parties
  • Two-factor authentication (2FA): Available to all bola99 accounts as an added layer of security
Security Alerts: While bola99 implements the best technical protections available, no system is 100% secure. You are responsible for keeping your account password confidential. Do not share your login credentials with anyone, including bola99 staff.

6. Your Rights as a Data Subject

As a bola99 user, you have the following rights regarding your personal data, in accordance with Malaysia's Personal Data Protection Act 2010:

1
Right of Access

To request a copy of the personal data we hold about you in a readable format.

2
Right to Rectification

To request correction of inaccurate or incomplete data about you in bola99's records.

3
Right to Erasure

To request deletion of your personal data when it is no longer needed for its original purpose.

4
Right to Data Portability

To receive your data in a machine-readable format for transfer to another provider.

5
Right to Object

To object to the processing of your data for direct marketing or specific interests.

6
Right to Restriction

To request that we restrict how we process your data under certain permitted circumstances.

To exercise any of these rights, contact the bola99 privacy team via Live Chat or email at [email protected]. Requests will be processed within 30 days from the date of receipt.

7. Cookies & Tracking Technologies

Bola99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

7.1 Types of Cookies We Use

  • Essential cookies: Required for core platform functions such as login, session verification, and security. These cookies cannot be disabled.
  • Performance cookies: To collect information on how you use the bola99 platform to help us improve its performance. Data is collected in aggregate and anonymised.
  • Functional cookies: To remember your preferences such as language, text size, and display settings for a more personalised experience.
  • Analytics cookies: Used by industry-standard analytics tools to understand overall platform usage patterns.

7.2 Managing Cookies

You can manage cookie settings through your web browser. Please note that disabling essential cookies may affect the functionality of the bola99 platform. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

8. Protection of Children's Data

The bola99 platform is for users aged Aged 18 and above only. We do not knowingly collect personal data from individuals under the age of 18.

If you are under 18, please do not use the bola99 platform or submit any personal information to us. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately and we will take the appropriate steps to delete that information.

9. Cross-Border Data Transfers

In operating an integrated platform, bola99 may process or store your data on servers located outside Malaysia. In all such cases, we ensure that:

  • Data transfers outside Malaysia are only made to countries or entities that provide an equivalent or higher level of data protection
  • All third-party service providers receiving data through cross-border transfers are bound by data protection contracts that meet Malaysia's PDPA standards
  • Sensitive financial data and KYC documents of Malaysia players are prioritized for storage within infrastructure located in the Asia Pacific region

10. Data Retention Period

Bola99 retains your personal data only for as long as necessary for the purpose of collection or as required by law. General retention period guidelines are as follows:

  • Active account data: Retained for the duration your account is active, plus 12 months after account closure
  • Financial transaction records: Retained for 7 years as required by financial regulatory obligations
  • KYC Documents: Retained for 5 years from the date of verification or account closure, whichever is longer
  • Customer support communication logs: Retained for 2 years for reference and dispute resolution purposes
  • Cookie and analytics data: Retained for 13 months from the date of collection

After the specified retention period, data is securely deleted using industry-recognised deletion methods to ensure it cannot be recovered.

11. Privacy Policy Amendments

Bola99 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. When we make material changes, we will:

  • To update the "Updated" date at the top of this document
  • To send email notifications to all registered members regarding important changes
  • To display a prominent notice on the bola99 platform for at least 30 days following any changes

Continued use of the bola99 platform after any amendments is considered your acceptance of the updated privacy terms. We encourage you to review this policy periodically.

12. Contact Us About Privacy

If you have any questions, concerns, or requests regarding how bola99 handles your personal data, please contact us via:

  • 24/7 Live Chat: Directly in the bola99 app or website – the fastest way for immediate questions
  • Privacy Email: [email protected] – for written requests requiring an official record

We are committed to responding to all privacy-related enquiries within 72 hours to complete. For more complex data rights requests, the resolution timeframe is up to 30 days.

Connect with Confidence: All privacy communications you send to bola99 are handled confidentially by our privacy team. Information you share in privacy enquiries will not be used for any other purpose.

FAQ – Bola99 Privacy Policy

No, bola99 never sells players' personal data to any third party. We only share data with service providers that process your transactions (such as payment gateways), and only the minimum information required, subject to strict confidentiality agreements.

You can request a copy of your personal data by contacting bola99 support via Live Chat or by emailing [email protected] with the subject "Data Access Request". For security purposes, identity verification will be required before data is released. Requests will be processed within 30 days.

Yes, you have the right to request deletion of your personal data. However, some data must be retained for a certain period due to legal requirements – for example, financial transaction records must be kept for 7 years. Data not subject to legal requirements will be fully deleted within 30 days of your request.

Bola99 does not store your full bank card number or sensitive credit/debit card information on our servers. All transactions are processed through certified payment gateways compliant with PCI DSS (Payment Card Industry Data Security Standard). Stored bank account information refers only to local bank account numbers for withdrawal purposes, and is kept in encrypted format.

Bola99 only detects approximate location (country and region) based on your IP address for geolocation verification and compliance purposes. We do not access your device's GPS data or track your precise physical location. Device location access is not required to use the bola99 app or website.

Play at Bola99 with Confidence

Your data security and privacy are our top priority. Register today and play with peace of mind, knowing your information is protected by the industry's leading security systems.

For those aged 18 and above. Bet responsibly.

Bahasa Melayu