1. Home
  2. Privacy Policy

Official Platform Policies

Bones888 Privacy Policy – Protecting Your Personal Data

Your privacy is not merely a legal obligation for us — it is a responsibility we take seriously from day one. This document clearly explains how bones888 collects, uses, stores, and protects the personal data of every member in Malaysia.

Updated: January 2026
Table of Contents
  1. Introduction & Scope
  2. Data We Collect
  3. How We Use Your Data
  4. Legal Basis for Processing
  5. Data Sharing
  6. Security & Data Storage
  7. Your Rights as a Data Subject
  8. Cookies & Tracking Technologies
  9. Children's Data
  10. Privacy Policy Updates
  11. Contact Our Privacy Officer

Bones888's Privacy Commitment to Malaysian Players

Six core principles that define how bones888 handles every member's personal data — with transparency, security, and respect.

256-bit SSL Encryption at All Times
All data transmitted between your device and the bones888 servers is protected by 256-bit SSL encryption — the same security standard used by leading banks in Malaysia. Your personal information and payment details are never transmitted without full protection.
Data Not Sold to Third Parties
bones888 does not sell, rent, or trade your personal data to any third party for marketing purposes. Your data belongs to you — and we use it only for the purposes you explicitly agreed to at registration or consented to at a later stage.
Limited & Controlled Data Access
Only bones888 staff with a legitimate operational need are permitted to access members' personal data. Access is governed through a layered authorisation system, automatically logged, and subject to regular audits. Any unauthorised access will be detected and acted upon.
Minimum Necessary Data Retention
bones888 retains your personal data only for as long as it is needed for the stated purposes or as required by Malaysian law. Once data is no longer needed, it is deleted or anonymised in accordance with secure, irreversible data disposal procedures.
Full Control in Your Hands
You may view, update, request a copy of, or apply for the deletion of your personal data at any time through your bones888 account settings or by contacting our privacy officer. These rights are non-negotiable and will be processed within the stipulated timeframes.
Compliance with Malaysia's Personal Data Protection Act
The bones888 Privacy Policy is designed to comply with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA). This means your rights as a data subject are fully recognised, and your data is processed only on a valid legal basis.
Please Read This Privacy Policy Carefully
This Privacy Policy describes bones888's data handling practices and your rights with respect to your personal data. By using the bones888 platform, you confirm that you have read and understood this Privacy Policy. If you have any questions, contact our privacy officer at privacy@bones888.best at any time.
01

Introduction & Scope

bones888 ("Platform", "We", "Us") is an online betting and casino platform operator providing services to players in Malaysia. This Privacy Policy explains how we collect, process, store, share, and protect your personal data as a member or prospective member of the bones888 platform.

This Policy applies to all individuals who interact with the platform bones888 — including those who browse our website without registering an account, those who register but have never made a deposit, and active members who use all platform features including slots, live casino, football betting, badminton, and more. It also applies to interactions via the mobile app, email, live chat, WhatsApp, and all other communication channels between you and bones888.

This Privacy Policy should be read alongside the bones888 Terms & Conditions and other relevant policy documents. In the event of any conflict between these documents, this Privacy Policy shall prevail for all matters relating to personal data.

02

Data We Collect

bones888 collects personal data from various sources when you use our platform. The type of data we collect depends on how you interact with the platform — from simply browsing the website to becoming an active member making financial transactions.

Data Category Example Information How It Is Collected
Identity Data Full name, date of birth, gender, national identification number Account registration, identity verification
Contact Data Mobile phone number, email address Account registration, profile updates
Financial Data Bank account numbers, e-wallet IDs (TnG, GrabPay, Boost, ShopeePay), deposit and withdrawal records Deposit and withdrawal transactions
Gaming Data Betting history, wins, losses, games played, session duration Collected automatically during platform use
Technical Data IP address, device type, operating system, web browser, access logs Automatically via cookies and system logs
Communication Data Live chat records, support emails, WhatsApp logs When you contact customer support

We may also collect data from legitimate third-party sources for identity verification and fraud prevention purposes — including identity verification agencies licensed in Malaysia. Data from these sources is used solely for security and legal compliance purposes and is not used for marketing.

03

How We Use Your Data

bones888 uses collected personal data only for legitimate, stated purposes. We do not process data for purposes unrelated to platform operations and our relationship with you as a member. The following are the primary purposes for which your personal data is used:

  • Account Management — Creating and managing your account, processing registrations, verifying identity, and maintaining accurate account records
  • Transaction Processing — Processing deposits via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay; processing withdrawals to your Malaysian bank account and e-wallet
  • Service Provision — Providing access to all games on the platform including slots, Live Casino, Malaysia Super League and EPL Sports Betting, badminton betting, and roulette
  • Security & Fraud Prevention — Detecting suspicious activity, preventing multiple account registrations, combating money laundering, and safeguarding the security of the platform and all members
  • Customer Support — Handling enquiries, resolving complaints, and providing technical assistance in Bahasa Melayu 24/7
  • Responsible Gaming — Monitoring gameplay patterns to identify signs of problem gambling, enforcing member-set limits, and sending relevant responsible gaming notifications
  • Legal Compliance — To meet obligations under applicable Malaysian law, including anti-money laundering (AML) and know your customer (KYC) requirements
  • Marketing Communications — Sending information about promotions, bonuses, and special offers — only to members who have given their consent to receive such communications

We do not make automated decisions that have a legal or similarly significant effect on you based solely on automated data processing without human involvement — except for immediate security measures such as temporary account suspension during fraud investigations, which are followed by prompt human review.

04

Legal Basis for Processing

bones888 only processes your personal data where there is a valid legal basis for doing so under Malaysia's Personal Data Protection Act 2010 (PDPA). The legal bases we rely on are as follows:

  • Consent — For marketing communications, preference cookies, and any processing beyond contractual requirements — your consent is given explicitly and may be withdrawn at any time
  • Contract Performance — To process transactions, manage accounts, provide gaming services, and fulfil all essential aspects of the contractual relationship between you and bones888
  • Legitimate Interests — For platform security, fraud prevention, service improvement, and internal analysis — where our legitimate interests do not override your fundamental right to privacy
  • Legal Obligation — When Malaysian law requires us to process or disclose certain data to the relevant authorities

Where we rely on consent as the legal basis, you have the right to withdraw that consent at any time by contacting us. Withdrawal of consent will not affect the validity of any processing carried out prior to the withdrawal. It may also mean we are unable to continue providing certain services that require the processing of that data.

05

Data Sharing

bones888 does not sell or rent your personal data to third parties for their own marketing purposes. However, to operate our platform and provide the services you use, we may need to share data with certain parties under limited and controlled circumstances.

  • Payment Service Providers — To process deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and the relevant Malaysian banking institutions. These providers receive only the data required to process the transaction
  • Game Providers — Pragmatic Play, PG Soft, Evolution Gaming, Habanero, Spadegaming, and other providers supplying slots, Live Casino, and sports games. Only the minimum data required for game session login is shared securely
  • Identity Verification Providers — Licensed KYC (Know Your Customer) agencies that assist us in verifying member identities in accordance with anti-money laundering requirements
  • Statutory Authorities — When required by Malaysian law or a valid court order, we will disclose data to the relevant authorities
  • Technology Service Providers — Cloud hosting companies, cybersecurity infrastructure providers, and analytics service providers operating as data processors under strict confidentiality agreements
All third parties that receive your personal data from bones888 are bound by strict data processing agreements and are required to protect your data to a standard at least equivalent to the protection bones888 itself provides.
06

Security & Data Storage

bones888 continually invests in robust data security infrastructure to ensure your personal data is protected against ever-evolving threats. The technical and organisational security measures we implement include:

  • Data encryption in transit using TLS 1.3 and 256-bit SSL for all communications between your device and our servers
  • Encryption at rest for all sensitive data, including financial information and identity verification documents
  • Role-based access control (RBAC) ensuring only staff with a legitimate operational need can access specific data
  • Mandatory two-factor authentication (2FA) for all internal staff accounts with access to member data systems
  • 24/7 security monitoring by our cybersecurity team with automated intrusion detection systems
  • Regular penetration testing by independent security firms to identify and address vulnerabilities
  • Regularly encrypted data backups to storage facilities at separate locations

Your personal data is retained for as long as your account remains active or as long as necessary for the stated processing purposes. After account closure, data is held for the period required under Malaysian law — typically 7 years for financial records in accordance with AML requirements — before being securely deleted. Data that is no longer needed for its stated purpose will be anonymised or deleted in line with our data retention schedule.

Security Incident Response Procedure
In the event of a data security breach affecting your personal data, bones888 is committed to notifying you within 72 hours of becoming aware of the incident, in accordance with applicable data breach notification requirements. The notification will include the type of data involved, the actions we have taken, and the steps you can take to protect yourself.
07

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by bones888. We are committed to respecting and facilitating the exercise of these rights at no additional charge:

Right of Access
Request a copy of the personal data we hold about you. We will provide a copy in a readable format within 21 days of receiving your request.
Right to Correction
Request the correction of any personal data that is inaccurate or incomplete. Updates can be made directly in your account settings or through customer support.
Right to Erasure
Request the deletion of your personal data under certain circumstances — for example, when the data is no longer necessary or you withdraw your consent. Subject to statutory retention obligations.
Right to Object
Object to the processing of your data for direct marketing purposes at any time. We will cease processing for that purpose immediately upon receiving your objection.
Right to Data Portability
Request your data in a structured, machine-readable format (JSON or CSV) for transfer to another service provider of your choice.
Right to Restrict Processing
Request a restriction on the processing of your data under certain circumstances — such as when you are disputing the accuracy of the data or during an investigation related to a processing objection.

To exercise any of the rights above, contact our privacy officer at privacy@bones888.best, stating the right you wish to exercise and the information required to verify your identity. We will respond within 21 business days. For complex requests, this period may be extended up to 60 days with appropriate notice.

08

Cookies & Tracking Technologies

bones888 uses cookies and similar tracking technologies to enhance your experience on our platform, understand how you use our services, and maintain the security of your login session. The types of cookies we use are as follows:

  • Essential Cookies — Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled as the platform will not function properly without them
  • Performance Cookies — Collects information on how pages are used to help us improve the platform. This data is gathered in aggregate form and does not identify you personally
  • Functional Cookies — Remembers your preferences such as saved username, language selection, and display settings to provide a more personalised experience
  • Analytics Cookies — Helps us understand platform usage patterns for ongoing improvements. You may opt out of this analytics at any time

You can manage cookies through your web browser settings. Most browsers allow you to view, delete, and block cookies. Please note, however, that disabling essential cookies may affect the functionality of the platform bones888 including the ability to log in securely. Cookie preferences you set are specific to the device and browser you are using.

09

Children's Data

Platform bones888 is exclusively for individuals aged 18 and above. We do not knowingly collect, process, or store personal data of individuals under the age of 18. If you believe that someone under 18 has used our platform or that we may inadvertently hold a minor's data, please contact us immediately at privacy@bones888.best.

If we become aware that personal data belonging to an individual under the age of 18 has been inadvertently collected, we will take immediate steps to delete that data, close the associated account, and prevent any further use of the platform by that individual. bones888 has zero tolerance for platform use by minors, and age verification is a standard part of our identity verification procedure.

10

Privacy Policy Updates

bones888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, legislative developments, or improvements to the way we protect your data. All material amendments will be communicated to you through:

  • An email notification sent to your registered email address at least 14 days before the amendment takes effect
  • An in-platform notification displayed upon your next login
  • A clear announcement at the top of this Privacy Policy page showing the updated date

For minor amendments that do not materially affect your rights — such as spelling corrections or clarifications of language — we may update this Policy without specific notice. The "Updated" date at the top of this page will always reflect the latest version. You are encouraged to review this page periodically. Continued use of the platform bones888 after the effective date of any amendment will be considered acceptance of the updated Privacy Policy.

11

Contact Our Privacy Officer

bones888 has appointed a Data Protection Officer responsible for ensuring compliance with data protection laws and handling all member privacy rights requests. If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through:

  • Privacy Officer Email: privacy@bones888.best — for data subject rights requests, privacy complaints, and policy enquiries
  • General Support Email: support@bones888.best — for general enquiries involving your account privacy
  • Live Chat: Available on the bones888 platform, 24 hours a day — for immediate privacy assistance

We are committed to responding to all privacy-related requests within 21 business days. For urgent matters involving data security or suspected privacy breaches, please contact us via live chat for immediate assistance. We will do our best to resolve your concerns directly, and if you are not satisfied with our response, you have the right to file a complaint with Malaysia's Personal Data Protection Department (PDPD) or the relevant data protection authority.

Identity Verification for Privacy Requests
To protect your data, we may request identity verification before processing any data subject rights request. This is a security measure to ensure we only disclose or modify your data to you — not to any other party claiming to be you. This verification process is standard practice and does not imply any doubt about your intentions.

FAQ – bones888 Privacy Policy

The most frequently asked questions by Malaysian members about privacy and data protection on the bones888 platform.

Deposit and withdrawal processing at bones888 involves sharing the necessary data with payment providers such as DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay. Data shared is limited strictly to what is required to process the transaction — typically the transaction ID, amount, and recipient account details. Your bank or e-wallet may display a merchant name in your transaction records in accordance with standard digital payment practices. bones888 does not share any other data, such as gaming history or betting records, with payment providers.

After you close your bones888 account, your personal data is retained for the period required under Malaysian law. Financial and transaction records are kept for 7 years in accordance with anti-money laundering (AML) legislation and applicable tax requirements. Identity data collected for KYC (Know Your Customer) purposes is retained for the same period. Other data not subject to statutory retention requirements — such as customer support chat history — will be deleted or anonymised within 12 months of account closure. Once the mandatory retention period has elapsed, all your data will be permanently deleted from our systems.

Yes, you can stop receiving marketing and promotional emails from bones888 at any time. There are two ways to do this. First, click the "Unsubscribe" link found at the bottom of any promotional email you receive from us. Second, log in to your bones888 account, go to Account Settings, and update your communication preferences to disable marketing notifications. Changes will take effect within 48 hours. Please note that you will still receive important account-related emails such as transaction confirmations, security notices, and policy updates — these are operational communications that we are unable to stop as they are tied to the security of your account.

bones888 uses multiple layers of protection to secure your account. These include strong password hashing encryption (we never store passwords in plain text), two-factor authentication (2FA) available and recommended for all members, detection of unusual login activity such as attempts from new locations or unrecognised devices, temporary account lockout after several failed login attempts, email or SMS notifications for sensitive account activity such as password changes or payment detail updates, and biometric login (fingerprint or facial recognition) available for mobile app users. You can also review your account activity log in Settings to see your recent login history. If you notice any unauthorised activity, contact bones888 customer support immediately.

To request a copy of your personal data (Subject Access Request), send an email to privacy@bones888.best with the subject line "Personal Data Access Request". Include your full name, bones888 account number, and the email address registered to your account. We may require additional identity verification before processing your request to ensure we only disclose data to the legitimate account holder. Once identity verification is complete, we will provide a comprehensive copy of the data we hold about you in a readable format (typically an encrypted PDF or CSV) within 21 business days of receiving your complete request. No fee is charged for the first request within any 12-month period.
View All FAQs →

Related Policy Documents

This Privacy Policy forms part of bones888's broader consumer protection framework. Please also read the following documents for a complete picture.

Terms & Conditions
The full terms of use for the bones888 platform, covering account rules, transactions, bonuses, and gameplay — everything you need to know before you play.
Read Terms & Conditions →
Responsible Gaming
Guides and tools for healthy play — including deposit limits, self-exclusion, and support resources for players who need assistance.
Read the Guide →
Frequently Asked Questions (FAQ)
Answers to more than 50 of the most frequently asked questions about accounts, payments, bonuses, games, and security at bones888.
Read FAQ →

Your Data Is Safe at bones888 – Always

Data privacy and security are the foundation of trust between bones888 and every member in Malaysia. Sign up with confidence — we protect your data to the highest security standards while delivering the best gaming experience.

Register for Free Now Already Have an Account?

Minimum age 18. Bet responsibly. Responsible Gaming

Bahasa Melayu