Privacy Policy

bonos888 ("bonos888", "we", "us", "our") operates the online gaming platform accessible at bonos888.cam ("the Platform", "the Site"). We are committed to protecting the privacy and personal data of all individuals who access or use our services, including registered players, site visitors, and prospective members.

This Privacy Policy ("Policy") sets out in detail how bonos888 collects, uses, stores, shares, and protects personal data in the course of operating our platform. It also explains your rights in relation to your personal data and how to exercise them. This Policy should be read alongside our Terms & Conditions, which govern the broader terms of your relationship with bonos888.

By accessing the bonos888 platform, completing the registration process, or otherwise providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the platform immediately.

For the purposes of this Privacy Policy, the following definitions shall apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, date of birth, financial data, and device identifiers.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" means bonos888, which determines the purposes and means of processing Personal Data collected through the platform.
• "Data Processor" means any third party that processes Personal Data on behalf of bonos888 under contractual agreement.
• "Consent" means any freely given, specific, informed, and unambiguous indication of a data subject's agreement to the processing of their Personal Data.
• "Cookies" means small text files placed on a user's device by a website to store information about the user's session, preferences, or behaviour.
• "KYC" (Know Your Customer) means the identity verification process required by bonos888 to comply with applicable regulatory obligations.
• "Player" / "User" means any individual who has registered an account on the bonos888 platform or who accesses the Site.

bonos888 collects Personal Data in the following categories, depending on the nature of your interaction with the platform:

We do not collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless specifically required by law or with your explicit consent.

bonos888 collects Personal Data through the following means:

• Direct Interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, participating in promotions, contacting customer support, or responding to surveys.
• Automated Technologies: Data collected automatically as you interact with the platform, including through cookies, server logs, session tracking tools, and analytics systems. This includes IP address, device identifiers, and behavioural usage patterns.
• Third-Party Payment Providers: Financial data received from payment processors when you use Malaysian payment channels such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and RHB for deposit and withdrawal transactions.
• Identity Verification Services: Data obtained from third-party KYC and identity verification providers used to confirm your identity and age in accordance with our regulatory obligations.
• Fraud Prevention and AML Screening Services: Data received from third-party services used to screen transactions and player profiles against sanctions lists and fraud databases.

bonos888 processes your Personal Data for the following purposes:

• Account Registration and Management: To create, maintain, and administer your bonos888 player account, including enabling login, account settings management, and communication of account-related notices.
• Identity and Age Verification (KYC): To verify your identity, confirm that you meet the minimum age requirement of 21 years, and fulfil regulatory compliance obligations including anti-money laundering (AML) checks.
• Payment Processing: To process your deposits and withdrawals via supported Malaysian and international payment channels, including reconciling transactions and resolving payment disputes.
• Platform Operation and Game Delivery: To provide access to casino games, live dealer tables, sports betting markets, and all other platform features, and to maintain the integrity of these services.
• Customer Support: To respond to enquiries, investigate complaints, process dispute submissions, and provide ongoing assistance via live chat and email.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other security threats to the platform and its users.
• Responsible Gambling: To monitor player behaviour for indicators of problem gambling, administer responsible gambling tools (including deposit limits, self-exclusion, and cooling-off periods), and fulfil duty-of-care obligations.
• Marketing and Promotions: To send you promotional offers, bonus notifications, and platform updates where you have provided consent to receive such communications. You may withdraw this consent at any time by contacting our support team.
• Platform Improvement and Analytics: To analyse usage patterns, improve platform features, troubleshoot technical issues, and optimise the player experience on an aggregated and anonymised basis where possible.
• Legal and Regulatory Compliance: To comply with applicable legal obligations, respond to lawful requests from regulatory authorities, and enforce our Terms & Conditions.

bonos888 processes your Personal Data on the following legal grounds, depending on the nature and purpose of the processing activity:

• Contractual Necessity: Processing required to perform the contract between you and bonos888 — including account management, payment processing, game delivery, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification, AML screening, regulatory reporting, and responding to lawful requests from competent authorities.
• Legitimate Interests: Processing carried out in furtherance of bonos888's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and analytics — provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given and specific consent, including the sending of marketing communications. Where consent is the legal basis, you retain the right to withdraw it at any time.

bonos888 does not sell, rent, or trade your Personal Data to any third party for their own marketing or commercial purposes. We may share your Personal Data with third parties only in the following circumstances:

• Payment Processors: We share financial data with payment service providers — including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and Malaysian bank channels — to the extent necessary to process your deposit and withdrawal transactions.
• Identity Verification Partners: We share identity documentation with authorised third-party KYC service providers to fulfil our age and identity verification obligations.
• Fraud and AML Screening Services: We may share relevant data with fraud prevention and anti-money laundering screening services to detect and prevent financial crime.
• Technology and Hosting Providers: We share data with infrastructure, cloud hosting, and technical service providers that operate components of the bonos888 platform under binding data processing agreements.
• Game Content Providers: Limited technical data may be shared with the game studios and live dealer operators whose content is integrated into the bonos888 platform, to the extent necessary for game delivery and performance monitoring.
• Regulatory Authorities: We will disclose Personal Data to competent regulatory, law enforcement, or governmental authorities where required to do so by applicable law, court order, or regulatory direction.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of bonos888's business, player data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections.

All third-party Data Processors engaged by bonos888 are required to process Personal Data solely in accordance with our documented instructions and to implement appropriate technical and organisational security measures.

bonos888 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your active account relationship with bonos888, plus a minimum of five (5) years following account closure, to satisfy AML record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with standard financial record-keeping obligations applicable to licensed gaming operators.
• KYC Documentation: Retained for a minimum of five (5) years following account closure or the completion of the relevant KYC process, whichever is later.
• Customer Support Communications: Retained for three (3) years following the resolution of the relevant support interaction, unless extended retention is required due to an ongoing dispute or legal matter.
• Marketing Consent Records: Retained for the duration of your active account and for a period sufficient to demonstrate compliance with consent requirements following account closure.
• Technical and Log Data: Generally retained for up to twelve (12) months, unless specific security investigations require extended retention.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification.

bonos888 implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the bonos888 platform is encrypted using industry-standard TLS 1.3 protocols.
• Data Encryption at Rest: Sensitive data stored within our systems is encrypted at rest using AES-256 or equivalent encryption standards.
• Access Controls: Access to Personal Data within bonos888's systems is restricted on a strict need-to-know basis. All internal access is logged, monitored, and subject to regular review.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts to add an additional layer of security against unauthorised access.
• Penetration Testing and Security Audits: The bonos888 platform undergoes regular security assessments to identify and remediate vulnerabilities.
• Incident Response: bonos888 maintains documented procedures for detecting, investigating, and responding to personal data breaches. In the event of a breach that is likely to result in a high risk to your rights and freedoms, we will notify affected players without undue delay.

bonos888 uses cookies and similar tracking technologies to enhance the functionality of the platform, improve the user experience, and gather analytical data about platform usage. The following types of cookies may be used:

• Strictly Necessary Cookies: Essential cookies required for the platform to function correctly, including session management, login persistence, and security features. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Cookies that remember your preferences, language settings, and platform configuration to provide a more personalised experience.
• Analytics Cookies: Cookies used to collect anonymised statistical data about how players interact with the platform — including pages visited, session duration, and game preferences — to inform platform improvements. This data is not used to identify individual users.
• Security Cookies: Cookies used to detect fraud, unusual session behaviour, and security threats, and to enforce platform security policies.

You may control cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the bonos888 platform and your overall user experience. Strictly necessary cookies cannot be disabled through browser settings while using the platform.

Subject to applicable law, you have the following rights in relation to your Personal Data held by bonos888. To exercise any of these rights, please contact our support team via live chat or at the email address specified in Section 15.

bonos888 is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain Personal Data from individuals below the age of 21. Our registration process requires applicants to confirm their date of birth, and KYC verification procedures are used to validate age claims where required.

If bonos888 becomes aware that Personal Data has been collected from an individual below the minimum age, such data will be immediately deleted from our systems, the associated account will be permanently closed, and any funds in the account will be handled in accordance with our Terms & Conditions and applicable regulatory guidance.

If you have reason to believe that a minor has registered an account on bonos888, please contact our support team immediately so that we can investigate and take appropriate action without delay.

The bonos888 platform may contain references to third-party services, payment processors, or informational resources. bonos888 does not control these third-party properties and is not responsible for their privacy practices, content, or data handling policies. This Privacy Policy applies solely to data processed by bonos888 in the context of the bonos888 platform.

We encourage you to review the privacy policies of any third-party services — including payment platforms such as Touch 'n Go eWallet, Boost, GrabPay, and banking institutions — before providing them with your Personal Data in connection with transactions on our platform.

bonos888 reserves the right to modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or platform features. All amendments will be effective immediately upon publication on the bonos888 website, unless a specific effective date is stated.

Where amendments are material — meaning they meaningfully change how we collect, use, or share your Personal Data — we will endeavour to provide advance notice to registered players via their registered email address or through a prominent notification on the platform.

Your continued use of the bonos888 platform following the publication of an updated Privacy Policy constitutes your acceptance of the amended terms. We recommend reviewing this Policy periodically to remain informed of how we protect and use your data. The "Last Updated" date at the top of this document reflects the date of the most recent revision.

If you have any questions, concerns, or requests in relation to this Privacy Policy or the handling of your Personal Data by bonos888, please contact our Data Protection team through the following channels:

• Live Chat: Available 24/7 directly within the bonos888 platform. This is the recommended channel for immediate assistance with account-related privacy queries.
• Email: [email protected] — please include "Privacy Request" in your subject line for data rights enquiries. We will acknowledge all formal requests within five (5) business days and aim to resolve them within thirty (30) business days.

When submitting a data rights request, please provide sufficient information to allow us to identify your account and verify your identity before processing the request. This is necessary to ensure that we do not disclose or modify data belonging to another individual.