Bom88 takes the privacy and security of Malaysian members' personal data extremely seriously. This document clearly explains how we collect, use, store, and protect your information in accordance with Malaysian law.
These are the core principles that shape how bom88 handles every member's personal data – transparently, responsibly, and in full compliance with Malaysian law.
Every bit of data transmitted between your device and bom88's servers – including login credentials, DuitNow or FPX deposit details, and your gameplay history – is protected by industry-standard 256-bit SSL encryption. This is the same encryption technology used by Malaysia's major banks, including Maybank and CIMB. Without the correct key, this data is completely unreadable to anyone.
Bom88 has never sold and will never sell members' personal information to any third party for marketing or commercial purposes. Limited data sharing occurs only when necessary for service operations (such as authorised payment processors) or when required by Malaysian law. All third-party service providers are bound by strict confidentiality agreements with bom88.
All of bom88's personal data collection, processing, and storage practices are designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA). This means we only collect data that is necessary, use it solely for the stated purposes, and retain it only for as long as it is needed. You have the legal right to access, correct, and delete your data.
Only bom88 staff who have been explicitly authorised and have a legitimate operational need may access members' personal data. All access is logged and monitored. bom88 staff undergo regular data protection training and are bound by strict confidentiality agreements. Any breach of confidentiality by staff is subject to immediate disciplinary action.
Bom88 will only send marketing communications — such as promotional information, bonus notifications and special offers — to members who have consented to receive such communications. You may opt out of marketing communications at any time through your bom88 account settings or by contacting our support team.
Bom88's Privacy Policy is reviewed and updated periodically to ensure it remains relevant in light of changes in technology, Malaysian law, and industry best practices. Whenever there are material changes to this Privacy Policy, members will be notified via an in-platform notification or email at least 14 days before the changes take effect.
This Privacy Policy ("Policy") describes how bom88 ("Platform", "we") collects, uses, discloses, and protects your personal information as a member or user of the bom88 platform. This Policy applies to all members who register for and use bom88's services in Malaysia.
By registering a bom88 account or using any of our services, you consent to the collection and use of your personal information as described in this Policy. If you do not agree with any part of this Policy, please discontinue use of the platform and contact us to close your account.
Bom88 collects personal information from members solely for legitimate operational purposes necessary to provide platform services safely and effectively. We adhere to a data minimisation principle – we only collect what is genuinely needed, nothing more.
The types of information we collect are as follows:
Bom88 does not collect sensitive information such as biometric data, health information, or religious information unless expressly required by Malaysian law for specific identity verification purposes. All financial data is stored in encrypted format and is never stored as plain text on any bom88 server.
In some cases, bom88 may receive information about you from legitimate third-party sources, such as identity verification service providers for the KYC (Know Your Customer) process. This information is used solely to verify your identity for security and legal compliance purposes, and is not used for any marketing activities.
Every use of bom88 members' personal data has a clear and legitimate purpose. We do not use your data for purposes not stated in this Policy without obtaining fresh consent from you. The primary purposes for which bom88 uses data are as follows:
Bom88 uses aggregated and anonymised usage data to understand how members interact with the platform, which games are most popular, and where there is room for improvement. These analytics help us make better product decisions that directly benefit your gaming experience. This data is never re-linked to any individual's identity for analytical purposes.
For marketing communications — such as Welcome Bonus notifications, promotional offers during Hari Raya Aidilfitri, or updates about new games — bom88 will only contact you if you have given explicit consent during registration or through your account settings. You may withdraw this consent at any time without any negative impact on your bom88 account or services.
Bom88 takes comprehensive technical and organisational measures to protect members' personal data from unauthorised access, disclosure, alteration, or destruction. bom88's data security infrastructure is built on a "defence-in-depth" approach — meaning multiple layers of protection must be breached before anyone can reach member data, making a serious data breach extremely difficult to achieve.
Key technical security measures implemented by bom88:
Regarding retention periods, bom88 retains active members' personal data for the duration of the active account plus seven (7) years after account closure, in line with Malaysian financial regulatory requirements. Financial transaction data is retained for ten (10) years in accordance with anti-money laundering (AML) compliance requirements. Data that is no longer required is securely deleted using industry-recognised data disposal methods.
In the unlikely event of a data breach affecting members' personal information, bom88 is committed to notifying affected members within 72 hours of detecting the incident. We will provide clear information about the type of data that may have been compromised, the steps we are taking to mitigate the risk, and the actions you can take to protect yourself. We will also report the incident to the relevant authorities in accordance with Malaysian legal requirements.
Bom88 does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. This is a non-negotiable commitment and one of the core principles of bom88's Privacy Policy. However, there are limited circumstances where sharing data with certain parties is necessary for the platform's operations:
Every third-party service provider that receives bom88 members' data is bound by strict data processing agreements, which require them to protect that data to the same or higher standards we apply, and prohibit its use for any purpose other than those explicitly authorised by bom88.
Bom88 periodically reviews its third-party service provider list to ensure ongoing compliance with data protection standards. Providers that fail to meet our standards will have their agreements terminated and any data shared with them deleted in accordance with bom88's data deletion procedures.
The bom88 platform uses cookies and similar tracking technologies to enhance the user experience, ensure account security and analyse usage patterns in aggregate. Cookies are small text files stored in your web browser when you visit the bom88 platform.
Bom88 uses three main categories of cookies:
You can manage your cookie settings through your web browser. Most modern browsers let you view, delete, and block cookies from specific websites. Disabling certain cookies may affect some features or functions of the bom88 platform, but will not prevent you from accessing your account's core functions.
Bom88 does not use third-party cookies for targeted advertising or cross-site tracking. Our tracking technologies are limited to the operation of the bom88 platform itself and do not share tracking data with external advertising networks.
As a bom88 member residing in Malaysia, you have specific rights over your personal data under the Personal Data Protection Act 2010 (PDPA). bom88 fully respects and facilitates the exercise of these rights. Your key rights are as follows:
You have the right to request a copy of all personal data bom88 holds about you. We will provide a full report within 14 business days of receiving your request.
If you find that your personal data held in bom88's systems is inaccurate or incomplete, you have the right to request a correction. We will update your data within 7 business days.
You have the right to request deletion of your personal data after your account is closed, subject to Malaysian legal retention requirements. Data that must be retained by law cannot be deleted before the stipulated period.
You may object at any time to your data being used for direct marketing purposes. Once your request is received, we will stop all marketing communications within 5 business days.
You have the right to receive your personal data in a machine-readable format (such as CSV or JSON) for transfer to another service, where this is technically feasible.
In certain circumstances, such as when the accuracy of your data is in dispute, you have the right to request that bom88 restrict the processing of your data until the dispute is resolved.
To exercise any of the rights above, submit a written request to the bom88 support team by email at support@bom88-bangla.com with the subject line "Personal Data Rights Request". Include your account number and proof of identity to help expedite the process. bom88 will not charge any fee for your first data rights request within any 12-month period.
Bom88's Privacy Policy is designed to fully comply with the Personal Data Protection Act 2010 (PDPA), Malaysia's primary legislation governing the processing of personal data. The PDPA sets out seven data protection principles that all organisations processing personal data in Malaysia must adhere to – and bom88 complies with all seven principles in their entirety.
The Seven Principles of Malaysia's PDPA and how bom88 complies with each:
Bom88 has appointed an internal Data Protection Officer responsible for overseeing PDPA compliance, handling data rights requests from members, and ensuring that all internal processes comply with current legal requirements. This officer is also responsible for reporting any data breaches to the relevant authorities within the timeframe prescribed by law.
In addition to PDPA, bom88 also complies with Malaysian financial compliance requirements related to data protection, including anti-money laundering (AML) and counter-terrorism financing (CFT) requirements that mandate the retention of certain financial records. Compliance with these requirements is a legal obligation, not a choice — it safeguards Malaysia's financial ecosystem as a whole.
Bom88 members' personal data is stored and processed on servers located in Malaysia or in jurisdictions with equivalent data protection laws. Where data needs to be transferred outside Malaysia – for example, for backup purposes or the use of international cloud services – bom88 ensures that protection equivalent to Malaysia's PDPA is applied to that data through appropriate contractual arrangements.
If you have any questions, concerns, or requests regarding this Privacy Policy or how bom88 handles your personal data, please do not hesitate to contact us. The bom88 team is ready to assist you and will provide clear, accurate responses to all privacy-related enquiries.
Contact channels for privacy enquiries:
For formal requests relating to personal data rights under PDPA — such as data access, rectification, or deletion requests — please submit a written request by email including your bom88 account number and a copy of your identification document for identity verification. bom88 will respond to formal requests within 14 business days.
If you are not satisfied with how bom88 has handled your privacy enquiry or complaint after going through our internal process, you have the right to refer the matter to the Department of Personal Data Protection Malaysia (JPDP) under the Ministry of Communications and Digital.
Answers to the questions most frequently asked by Malaysian members regarding privacy and data security at bom88.
The bom88 Privacy Policy forms part of our comprehensive member protection framework, alongside our Terms & Conditions and Responsible Gaming Policy. All three documents should be read together to fully understand your rights and responsibilities as a bom88 member. In the event of any conflict between a translated version and the Bahasa Melayu version of this document, the Bahasa Melayu version shall prevail. bom88 is committed to keeping this Privacy Policy up to date whenever there are changes to Malaysian law or relevant industry practices.
For more information, please read Terms & Conditions and Responsible Gaming us.