Privacy Policy bonus8888

1Introduction and Scope of This Policy

Bonus8888 ("we", "Platform") is committed to protecting the privacy and data security of all users who use our services. This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of your personal information.

This policy applies to all your interactions with bonus8888, including use of the website, mobile app (Android and iOS), and any services provided by our platform. By registering an account or continuing to use the platform after the date of any policy update, you consent to the practices described here.

This Privacy Policy should be read in conjunction with Terms and Conditions us and Responsible Gaming Policy which forms part of the overall agreement between you and bonus8888.

2Types of Personal Data We Collect

Bonus8888 collects various categories of information necessary to operate the platform and provide services to you. The following are the main categories of data we collect:

• Full name as it appears on official identity documents
• Active mobile number
• Email address
• Date of birth (for age verification)
• Username and password (stored in encrypted form)

• Registered bank account number or e-wallet number
• Bank account or e-wallet owner name
• Deposit and withdrawal transaction records
• KYC information including uploaded copies of identity documents

• Gaming activity records — game type, date, time, and wagering value
• IP address and location information at country or city level
• Device type, operating system, and app or browser version used
• Session log including login and logout times
• Customer support interaction data, including live chat transcripts

When you use the bonus8888 platform, certain information is collected automatically through technologies such as cookies, tracking pixels, and server logs. This includes navigation data, settings preferences, and platform performance information. See the Cookies section for more details.

3How We Use Your Data

Data collected by bonus8888 is used for the following purposes, which form the foundation of our platform's operations:

Your personal information is used to create and manage your account, verify your identity during login, process deposits and withdrawals, and provide effective customer support. Without this data, we are unable to deliver the platform's core services.

Usage data and financial information are analysed by our security systems to detect suspicious activity, prevent unauthorised access, and meet KYC and AML (Anti-Money Laundering) requirements. This protects all platform users from security threats.

We use your email address and mobile number to send important account notifications such as transaction confirmations, security alerts, and significant terms updates. These communications are non-promotional and cannot be unsubscribed from as they are essential for account security.

Usage data analysed in aggregate (not at an individual level) helps us understand how users interact with the platform, identify areas for improvement, and develop new features that meet the needs of Malaysian players.

4Data Sharing and Disclosure

Bonus8888 does not sell users' personal data. Data sharing only occurs in limited and specific situations as follows:

We share necessary data with third-party service providers that help operate the platform, including certified payment processors, gaming software providers, and cloud service providers that store our data. All operational partners are bound by strict data protection agreements and may only use data for specified purposes.

We may be required to disclose user information to authorities or regulatory bodies when mandated by law, court order, or in the context of financial crime investigations. In such situations, we will disclose only the minimum data necessary.

5Data Security Measures

Bonus8888 implements a range of technical and organisational measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure.

• 256-bit SSL encryption: All communications between your browser or app and our servers are fully encrypted
• Encryption of stored data: Sensitive information such as passwords and bank account numbers are stored in encrypted form
• Two-factor authentication (2FA): An additional security layer available for all user accounts
• 24/7 Monitoring: Our security systems continuously monitor for suspicious activity
• Security auditing: Vulnerability assessments and penetration testing are conducted regularly by independent third parties

Access to user data within bonus8888's internal systems is restricted on a least-privilege basis — only staff who genuinely require access to perform their assigned duties are granted permission. All personnel handling user data have completed data protection training and are bound by confidentiality agreements.

6Data Retention Period

Bonus8888 retains your personal data for as long as necessary for the purposes stated in this policy or as required by applicable law.

• Active account data: Retained for the duration your account is active and for a period of 5 years following account closure, in line with financial compliance requirements
• Financial transaction records: Retained for 7 years in accordance with Malaysia's financial compliance requirements
• Customer support conversation log: Retained for 2 years for quality control and dispute reference purposes
• Server log data: Retained for 90 days for security and technical debugging purposes
• KYC documents: Retained for the lifetime of the account and for at least 5 years following account closure

Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be identified.

7Your Rights Regarding Personal Data

As a bonus8888 user, you have the following rights regarding your personal data. To exercise any of these rights, contact our support team via live chat or email.

• Right to Access: You have the right to request a copy of the personal data we hold about you
• Right to Rectification: You have the right to request the correction of inaccurate or incomplete data
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data
• Right to Restrict Processing: You have the right to request that we restrict how we process your data in certain circumstances
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes
• Right to Data Portability: You have the right to receive your data in a structured, machine-readable format

8Child Protection

The bonus8888 platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has registered an account on our platform, please contact our support team immediately.

Upon receiving such information, we will investigate and close the account in question, and delete all related data as promptly as possible. bonus8888 uses age verification procedures during registration to help prevent access by underage individuals.

9Changes to This Privacy Policy

Bonus8888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. The date of the most recent update is always displayed at the top of this policy.

For significant changes that materially affect how we handle your personal data, we will provide notice via your registered email and/or in-platform notification at least 14 days before the changes take effect. We encourage you to review this policy periodically to stay informed about how your data is handled.

10Contact Us About Privacy

If you have any questions, concerns, or wish to exercise your rights regarding personal data, please contact our team via:

• Live Chat: The fastest option — available 24/7 directly within the bonus8888 platform
• Email: [email protected] — for privacy enquiries requiring written documentation
• FAQ: Visit page FAQ us for answers to frequently asked questions about privacy

We aim to respond to all privacy-related enquiries within 5 business days. For more complex requests such as data deletion or comprehensive data access requests, the process may take up to 30 business days.