Privacy Policy bola86 – Your Data Security

Bola86 ("we", "Platform") takes the privacy of every user who accesses the bola86.onl website and our mobile app seriously. This Privacy Policy has been drafted to clearly and transparently explain how we collect, store, use, and protect your personal data in line with international best practices in data protection.

This policy applies to all users who access or use bola86 services, including unregistered visitors, registered members, and active platform users. Whenever you provide information to us — whether during registration, deposit, withdrawal, or simply browsing the site — this policy governs how that information is handled.

We are committed to ensuring that every decision involving user data is made with privacy, security, and user interests as the top priority. Your trust in bola86 is a responsibility we do not take lightly.

Bola86 collects personal data necessary to provide services that are safe, seamless, and compliant with legal requirements. Data is collected through three primary methods: information you provide directly, data generated during platform use, and information from authorised third parties.

We only collect data that is strictly necessary for the stated purpose. If certain information is not needed, we will not ask for it. This data minimisation principle is at the core of how we operate.

Every piece of data we collect is used for a specific and legitimate purpose. Below is the complete list of purposes for which bola86 user personal data is used:

• Account Management: Creating, verifying, and managing your user account, including KYC processes required to comply with platform security standards.
• Financial Transaction Processing: Processing deposits, withdrawals, bonus payments, and all financial transactions accurately and securely.
• Platform Security: Detecting and preventing fraud, money laundering, account abuse, and any suspicious activity that could harm other users or the platform.
• Service Communications: Sending important notifications related to your account, transactions, security updates, and policy changes that affect your experience.
• Customer Support: Handling inquiries, complaints, and support requests more efficiently using your account history and communications.
• Service Improvements: Analysing usage patterns on an aggregate and anonymised basis to improve platform features, performance, and user experience.
• Legal Compliance: Fulfilling legal obligations, regulations, and directives from relevant authorities applicable within our operating jurisdiction.
• Related Marketing (with consent): Sending promotional offers, bonuses, and information about new products — only to users who have given consent to receive marketing communications.

Bola86 does not use your personal data for any purpose outside the list above without first obtaining your renewed consent.

Bola86 does not sell, rent, or transfer user personal data to third parties for marketing or commercial gain. However, there are limited situations where disclosure of data to authorised third parties is necessary to deliver our services:

• Payment Providers: Minimal transaction information is shared with payment processors and banking institutions as required to complete your deposits and withdrawals.
• KYC Service Providers: Identity verification data is shared with accredited third-party verification service providers to complete the KYC process.
• Game Providers: Required game session data is shared with game software providers to ensure games function correctly and fairly.
• Legal Authority: bola86 will disclose information as requested by legal authorities, courts, or regulatory bodies when required to do so by law.
• Technical Infrastructure Services: Cloud service and technical infrastructure providers that store and process data on our behalf, subject to strict confidentiality agreements.

All third parties we work with are required to comply with privacy and data security standards equal to or higher than those of bola86 itself. Binding data processing agreements are signed with every third-party provider.

Bola86 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyse how the platform is used. The following are the types of cookies used:

Essential cookies cannot be disabled as they are required for the platform's core functionality. For analytics and preference cookies, you can manage your cookie settings through your web browser settings. Please note that disabling certain cookies may affect your experience on the bola86 platform.

Bola86 does not use third-party tracking cookies for advertising purposes or for cross-site tracking without your knowledge.

Data security is not just an add-on feature at bola86 — it is central to how we build and operate the platform. The technical and organisational security measures we implement include:

• Data Encryption in Transit: All communications between your device and bola86 servers are protected using TLS 1.3 protocol with AES-256 encryption.
• Data Encryption at Rest: Sensitive data stored in our databases, including financial and identification information, is encrypted using the latest industry standards.
• Two-Factor Authentication (2FA): All user accounts support two-factor authentication as an additional security layer, which we strongly encourage you to enable.
• 24/7 Security Monitoring: Automated monitoring systems run around the clock to detect and respond to any security threats in real time.
• Internal Access Controls: Only specifically authorised bola86 staff with a legitimate operational need may access user data, with every access logged and audited.
• Regular Security Testing: The bola86 platform undergoes regular penetration testing and security audits conducted by independent security experts.

Bola86 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to meet applicable legal and regulatory requirements. The following are our data retention guidelines:

• Active Account Data: Retained for as long as your account remains active and for an additional period after account closure as required by law.
• Financial Transaction Records: Retained for a minimum of 7 years after the transaction date to meet financial reporting and anti-money laundering requirements.
• KYC Documents: Retained for the duration of account activity and a minimum of 5 years after account closure for legal compliance purposes.
• Security Logs: Retained for 12 months to assist in security incident investigations if required.
• Support Communication Data: Retained for 3 years for reference in the event of disputes or follow-up issues.

Once the retention period expires and no legal requirement mandates continued storage, your data will be securely deleted or anonymised using an irreversible process.

You have important rights regarding the personal data held by bola86. We are committed to making it easy for you to exercise these rights:

To exercise any of the above rights, contact our privacy team by email at [email protected]. We will respond within 30 days of receiving your request. No fees are charged for reasonable requests.

Bola86 services are strictly for individuals aged 18 and above. bola86 does not knowingly collect any personal data from individuals under the age of 18.

If we discover that data belonging to a person under the age of 18 has been collected without our knowledge, that data will be deleted immediately and the associated account will be terminated. If you are aware of a minor using the bola86 platform, please notify us promptly so that appropriate action can be taken.

Bola86 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or newly introduced platform features.

Any material changes to this policy will be communicated to registered users via email and in-platform notifications at least 14 days before the changes take effect. For less material changes, we will update the "Last Updated" date at the top of this document.

Continued use of the bola86 platform after a change notice is considered your acceptance of the amended policy. If you do not agree with the changes, you have the right to close your account and request data deletion in accordance with the rights outlined in Section 8.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the bola86 privacy team is ready to assist you.

• Privacy Email: [email protected]
• Live Chat: Available 24/7 via the chat icon at the bottom-right corner of the bola86 platform.
• Response Time: We are committed to responding to all privacy-related inquiries within 2 business days, and processing user rights requests within 30 days.

For general enquiries about our services or your account, you may also visit our FAQ page, which contains answers to the most frequently asked questions by users in Malaysia.

This Privacy Policy forms part of the overall agreement between you and bola86, together with Terms & Conditions as well as our Responsible Gaming Policy.