bones88 Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") sets out how bones88 ("bones88", "we", "us", "our") — the operator of the online gaming platform accessible at bones88.org — collects, uses, stores, shares, and protects personal data provided by or collected from registered players and visitors ("you", "your") in connection with the use of our services.

This Policy should be read in conjunction with the bones88 Terms & Conditions and Responsible Gaming policy. By creating an account or using any bones88 service, you acknowledge that you have read and understood this Policy.

2. Data We Collect

2.1 Information You Provide Directly

When you register an account, make deposits or withdrawals, contact customer support, or participate in promotions, bones88 may collect the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, government-issued identification number (e.g., MyKad, passport number)
• Contact Data: Residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya), email address, mobile phone number
• Financial Data: Payment method details (e.g., Touch 'n Go eWallet account reference, FPX bank account details), transaction history, deposit and withdrawal records denominated in MYR
• Account Data: Username, password (stored in hashed form), account preferences, responsible gaming settings
• Communications Data: Records of correspondence with the bones88 customer support team, including live chat transcripts and support ticket content
• Verification Documents: Copies of identification documents, proof of address, and payment method verification submitted during KYC processes

2.2 Information Collected Automatically

When you access and use the bones88 platform, we automatically collect certain technical and behavioural data, including:

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, language settings
• Usage Data: Pages visited, games played, session duration, bet history, click patterns, referring URLs
• Location Data: General geographic location inferred from IP address (country and city level only — we do not collect GPS or precise location data)
• Cookie Data: Data collected through cookies and similar technologies as described in Section 7 of this Policy

2.3 Information from Third Parties

In limited circumstances, bones88 may receive personal data about you from third-party sources, including identity verification services, fraud prevention databases, payment processors, and regulatory compliance partners. Such data is processed in accordance with this Policy.

3. How We Use Your Data

bones88 uses the personal data we collect for the following purposes:

• Account Management: Creating and maintaining your bones88 account, verifying your identity, and managing your preferences
• Service Delivery: Processing deposits and withdrawals in MYR, settling bets and game outcomes, and providing access to all bones88 products
• Customer Support: Responding to enquiries, resolving complaints, and managing your support history
• Legal & Regulatory Compliance: Fulfilling KYC (Know Your Customer) and AML (Anti-Money Laundering) obligations, reporting to gaming regulators and financial intelligence units as required by law
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, cheating, account compromise, and other prohibited conduct
• Responsible Gaming: Monitoring play patterns to identify problem gambling indicators and administering self-exclusion, deposit limit, and cooling-off tools
• Platform Improvement: Analysing usage data to improve platform performance, game selection, and user experience
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates where you have consented or where we have a legitimate interest, in compliance with applicable communications laws

4. Legal Basis for Processing

bones88 processes your personal data only where a lawful basis exists under applicable data protection law. The primary legal bases we rely on are:

• Contractual Necessity: Processing required to perform our contract with you — i.e., providing the bones88 gaming service in accordance with the Terms & Conditions you have accepted
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML legislation, gaming licence conditions, and financial reporting requirements
• Legitimate Interests: Processing necessary for our legitimate business interests — including fraud prevention, platform security, and service improvement — where those interests are not overridden by your data protection rights
• Consent: Where required by law, we will obtain your explicit consent before processing your data for specific purposes such as direct marketing. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal

5. Sharing Your Data

5.1 Internal Sharing

Your personal data may be accessed by bones88 staff and teams who require it to fulfil their roles, including customer support, compliance, finance, and technical operations. Access is restricted on a need-to-know basis and subject to confidentiality obligations.

5.2 Third-Party Service Providers

bones88 engages trusted third-party service providers to assist in operating the platform. These providers process personal data strictly on our instructions and are contractually bound by data protection obligations. Categories of third-party providers include:

• Payment processors and e-wallet operators (including those processing Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX transactions)
• Identity verification and KYC service providers
• Fraud detection and AML screening services
• Cloud hosting and IT infrastructure providers
• Customer support software providers
• Game software studios and content providers (limited technical integration data only)

5.3 Regulatory & Legal Disclosures

bones88 may disclose personal data to regulatory authorities, gaming commissions, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction. Such disclosures will be made in strict compliance with legal obligations and, where permissible, we will endeavour to inform you prior to disclosure.

5.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the bones88 business, personal data held by bones88 may be transferred to the relevant successor entity. You will be notified of any such transfer and the privacy terms that will apply following the transaction.

5.5 No Sale of Personal Data

bones88 does not sell, rent, or trade personal data to unaffiliated third parties for their own independent marketing or commercial purposes.

6. Data Retention

bones88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to applicable legal and regulatory retention requirements. Specific retention periods include:

• Account and Transaction Data: Retained for a minimum of 5 years following account closure, in accordance with AML and gaming regulatory requirements
• Identity Verification Documents: Retained for a minimum of 5 years following completion of the KYC process or account closure, whichever is later
• Customer Support Records: Retained for 3 years following resolution of the relevant matter
• Marketing Consent Records: Retained for the duration of your account and for 3 years following account closure or consent withdrawal
• Technical and Usage Data: Typically retained for 12–24 months for platform analytics and security purposes

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised.

7. Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. bones88 uses cookies and similar technologies (including local storage and session identifiers) to operate the platform effectively, remember your preferences, and analyse usage patterns.

7.2 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the platform to function. These cannot be disabled without breaking core functionality such as login sessions and payment processing.
• Performance & Analytics Cookies: Used to collect anonymised information about how players use the platform, enabling us to improve performance and user experience.
• Functional Cookies: Allow the platform to remember your preferences (such as language or display settings) to provide a more personalised experience.
• Marketing Cookies: Used to deliver relevant promotional content. These are only placed where you have given your consent.

7.3 Managing Cookies

You may control and delete cookies through your browser settings. Disabling strictly necessary cookies may impair your ability to use bones88. Information on managing cookies is available through the help section of most major browsers.

8. International Data Transfers

bones88 is an international platform and some of your personal data may be transferred to, stored in, or processed in countries outside of Malaysia — including for the purpose of cloud hosting, identity verification, or game provision. Where such transfers occur, bones88 ensures that appropriate safeguards are in place to protect your data, including contractual obligations consistent with applicable data protection law. By using the bones88 platform, you consent to such transfers subject to those safeguards.

9. Data Security

bones88 implements and maintains appropriate technical and organisational security measures designed to protect personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and bones88 servers
• Encrypted storage of passwords using industry-standard hashing algorithms — bones88 staff cannot access your plain-text password
• Access controls and role-based permissions restricting data access to authorised personnel only
• Regular security audits, penetration testing, and vulnerability assessments
• Incident response procedures to detect, investigate, and address any data security breach promptly

In the event of a data breach that is likely to result in a risk to your rights and freedoms, bones88 will notify you and the relevant supervisory authority in accordance with applicable legal obligations.

10. Your Data Rights

Subject to applicable law and regulatory restrictions, you have the following rights in respect of your personal data held by bones88:

• Right of Access: Request a copy of the personal data bones88 holds about you
• Right of Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data where there is no compelling reason for its continued processing (subject to legal retention obligations)
• Right to Restriction: Request that we restrict processing of your personal data in certain circumstances
• Right to Data Portability: Request receipt of personal data you have provided to us in a structured, commonly used, machine-readable format
• Right to Object: Object to processing based on legitimate interests, including direct marketing
• Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time without affecting prior processing

To exercise any of the above rights, please contact the bones88 data protection team. We will respond to all verifiable requests within 30 days. In some cases, we may need to verify your identity before fulfilling a request.

11. Children's Privacy

The bones88 platform is strictly for persons aged 21 and above. We do not knowingly collect, store, or process personal data from individuals under the age of 21. If you are under 21, you are not permitted to use bones88 and must not attempt to register an account or provide us with any personal data.

If bones88 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has provided personal data to bones88, please contact us at the details set out in Section 15 of this Policy.

12. Marketing Communications

With your consent, bones88 may send you marketing communications about promotions, bonuses, new game releases, and platform features by email, SMS, or in-app notification. You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any bones88 marketing email
• Updating your communication preferences in your bones88 account settings
• Contacting bones88 customer support directly

Please note that transactional and account-related communications (such as deposit confirmations, withdrawal notifications, and security alerts) are not marketing communications and will continue to be sent regardless of your marketing preferences.

13. Third-Party Links

The bones88 platform may contain links to third-party websites or services. bones88 is not responsible for the privacy practices of those third-party sites and this Policy does not apply to them. We encourage you to review the privacy policies of any third-party sites you visit. bones88 does not endorse or make any representation about the privacy standards of third-party operators.

14. Policy Changes

bones88 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via the email address on file and/or through a prominent notice on the bones88 platform. The revised Policy will take effect from the date specified in the notice. Your continued use of the platform after the effective date constitutes acceptance of the updated Policy.

We recommend checking this page periodically so you are always aware of the current terms under which your personal data is processed.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by bones88, please contact our data protection team:

If you are not satisfied with our response to a privacy enquiry or complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.