Privacy Policy Bola99 – Personal Data Protection for Members in Malaysia

This Privacy Policy applies to all users who access or use the bola99 platform, including visitors without a registered account, registered members and former members whose accounts have been closed. It covers all services offered at bola99.onl including online gaming, sports betting, live casino and all related support functions.

We take your privacy seriously. As a platform operating in Malaysia and serving Malaysian users, bola99 fully complies with the Personal Data Protection Act 2010 (PDPA Malaysia) in all aspects of personal data handling. We also adopt international best practices in data protection to ensure our data security standards remain at the highest level.

Bola99 collects various types of personal information depending on how you interact with our platform. Below is a summary table of the data types collected and their purposes:

We also collect information you voluntarily provide, such as when contacting our support team or filling out a feedback form. All data is collected on a legitimate basis and used only for the stated purposes.

The personal data we collect is used for the following purposes, all of which are lawful and necessary for the operation of the bola99 platform:

• Account management and verification – Processes registration, verifies identity through KYC, and ensures the security of your account.
• Financial transaction processing – Handles deposits and withdrawals safely and accurately using your chosen payment method.
• Security and fraud prevention – Detects and prevents fraudulent activity, money laundering, and unauthorized access using the bola99 monitoring system.
• Service delivery – Allows you to access all games, promotions, and features on the bola99 platform seamlessly.
• Service communications – Sends important notifications related to your account, transactions, policy changes, and security information.
• Platform improvements – Analyzes usage patterns to enhance the user experience and develop relevant new features.
• Legal compliance – Fulfills reporting and compliance obligations set by applicable laws and authorities.

Bola99 does not sell or rent your personal data to any third party. However, there are specific situations where we may need to share your information with certain parties to enable the platform to operate properly:

• Payment service providers – Required transaction information is shared with FPX, DuitNow, bank, and e-wallet providers to process your payments.
• Game providers – Minimum technical data is shared with licensed game providers to ensure games function properly on the bola99 platform.
• Technology infrastructure providers – Cloud and cybersecurity service providers that help us operate the platform securely and stably.
• Legal authorities – When required by court order, requests from legitimate authorities, or applicable legal obligations.
• Anti-money laundering agency – In cases where there is reasonable suspicion of illegal financial activity that must be reported to the relevant authorities.

All third parties we share data with are bound by strict confidentiality agreements and required to handle your information to the same data protection standards as bola99.

The security of your personal data is bola99's top priority. We implement multiple layers of technical and operational protection to keep your data safe at all times:

• 256-Bit SSL Encryption – All data transmitted between your browser and bola99 servers is protected with the same industry-grade encryption used by banks.
• Secure data storage – Personal information is stored in certified data centers with strict physical and digital access controls and continuous monitoring.
• Two-factor authentication (2FA) – A 2FA system is available for all bola99 accounts, providing an additional layer of security during login and transactions.
• Real-time activity monitoring – An automated threat detection system continuously monitors account activity and will temporarily lock an account if suspicious activity is detected.
• Regular security testing – Penetration testing and security audits are conducted regularly by independent security experts to identify and patch any vulnerabilities.

Bola99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit a website. The following are the types of cookies we use:

• Essential session cookies – Required to maintain your login session and ensure the platform functions correctly. Cannot be disabled without affecting core platform functionality.
• Preference cookies – Saves your preferences such as language, display theme, and other personal configurations for a more comfortable experience.
• Analytics cookies – Helps us understand how users interact with the platform to improve the overall experience.
• Security cookies – Used to detect suspicious sessions and protect your account from CSRF attacks and other security threats.

You can manage cookie settings through your web browser settings. However, disabling required cookies may affect the functionality of the bola99 platform on your device.

Under Malaysia's Personal Data Protection Act 2010 and the international data protection standards we comply with, you have the following rights regarding your personal data at bola99:

To exercise any of the above rights, please contact the bola99 support team via live chat or the email address listed at the bottom of this page. We will process your request within a reasonable timeframe and keep you updated on its progress.

Bola99 retains your personal data only for as long as it is required for the purposes stated in this policy or as mandated by law. The following are general guidelines for our data retention periods:

• Active account data – Retained for the duration your account is active and for 7 years after account closure for financial compliance purposes.
• Financial transaction records – Retained for a minimum of 7 years as required by Malaysia's anti-money laundering laws.
• Support communication records – Retained for 3 years from the date of last interaction.
• Technical log data – Retained for a maximum of 12 months for security monitoring purposes.
• Analytics cookie data – Deleted upon expiry of the validity period set for each respective cookie type.

Upon expiry of the applicable retention period, your personal data will be securely deleted from all bola99 systems in accordance with our integrated data deletion procedures.

The bola99 platform is exclusively for adults aged 21 and above. We do not knowingly collect or process personal data of underage individuals. If we discover that data belonging to a minor has been collected without our knowledge, it will be deleted immediately and the associated account will be closed.

Bola99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements or improvements in privacy protection. Any material changes will be communicated to you via in-platform notifications or email at least 7 days before the changes take effect.

The date of the latest update is always shown at the top of this page. We encourage you to check this page periodically to stay informed on how bola99 protects your privacy.

If you have any questions, concerns or requests regarding this Privacy Policy or how bola99 handles your personal data, you can reach us through the following channels:

This document was last updated on January 1, 2026. The latest version of the bola99 Privacy Policy is always available on this page.