bones888 Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") is issued by the bones888 platform ("bones888", "we", "us", "our") and governs the collection, use, storage, disclosure, and protection of personal data provided by or collected from individuals ("you", "Member") who access or use the bones888 website at bones888.club and any associated services.

bones888 is committed to handling your personal data responsibly and in accordance with applicable data protection laws and principles, including those reflected in Malaysia's Personal Data Protection Act 2010 (PDPA). By registering a bones888 account, making a transaction, or otherwise using our services, you consent to the practices described in this Policy.

If you do not agree with any part of this Policy, you should discontinue use of the bones888 platform and contact our support team to initiate account closure and data handling requests.

2. Data We Collect

2.1 Registration Data

When you create a bones888 account, we collect the following personal data that you provide directly:

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify that you meet the 21+ age requirement)
• Residential address, including country and postcode
• Email address (used as a primary communication channel)
• Mobile phone number (used for SMS OTP two-factor authentication and account notifications)
• Username selected at registration

2.2 Identity Verification Data

To comply with Know Your Customer (KYC) obligations and to process withdrawals, bones888 may request identity verification documents, which may include:

• A copy of a government-issued photo identification document (such as a Malaysian MyKad, passport, or driving licence)
• Proof of residential address (such as a utility bill or bank statement dated within the last 3 months)
• Proof of payment method ownership (such as a screenshot showing the Member's name on a registered e-wallet or bank account)

2.3 Transaction Data

bones888 records all financial transactions associated with your account, including deposits, withdrawals, bonus credits and debits, and the payment method used for each transaction. Transaction records are maintained for audit, compliance, and anti-money laundering purposes.

2.4 Gaming Activity Data

We collect records of your gaming activity on the bones888 platform, including game history, bet amounts, outcomes, session durations, login timestamps, and responsible gaming limit configurations. This data is used to maintain account integrity, resolve disputes, fulfil regulatory obligations, and support responsible gaming tools.

2.5 Technical & Device Data

When you access the bones888 platform, we automatically collect certain technical information, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session activity logs. This information is collected for security monitoring, fraud detection, and platform performance optimisation purposes.

2.6 Communications Data

Where you contact bones888 via live chat, email, or any other communication channel, we retain records of those communications, including the content of the messages and the date and time of contact. This is used for quality assurance, dispute resolution, and to provide continuity of support.

3. How We Use Your Data

bones888 uses the personal data we collect for the following purposes:

Purpose	Data Used
Account creation and authentication	Registration data, device data
Identity verification and KYC compliance	Registration data, identity verification documents
Processing deposits and withdrawals in MYR	Transaction data, identity verification data
Delivering gaming services (Sportsbook, Casino, Slots)	Gaming activity data, account data
Fraud detection and security monitoring	Technical data, transaction data, gaming data
Responsible gaming monitoring and intervention	Gaming activity data, account data
Customer support and dispute resolution	Communications data, account data, transaction data
Regulatory and anti-money laundering compliance	All categories of personal data
Platform analytics and performance improvement	Technical data, gaming activity data (anonymised where possible)
Sending transactional communications (deposits, withdrawals, security alerts)	Registration data (email, mobile number)

bones888 does not use your personal data for unsolicited marketing communications without your explicit consent. Where you have consented to receiving promotional communications, you may withdraw that consent at any time by contacting support.

4. Legal Basis for Processing

bones888 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to create and maintain your bones888 account, process transactions, and deliver the services you have signed up for.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, KYC obligations, and data retention requirements imposed by relevant gaming authorities.
• Legitimate interests: Processing necessary for fraud prevention, security monitoring, platform improvement, and responsible gaming operations, where those interests are not overridden by your fundamental rights.
• Consent: Processing for marketing communications, where you have provided explicit consent. Consent may be withdrawn at any time.

5. Data Sharing

5.1 Service Providers

bones888 may share your personal data with trusted third-party service providers who assist in operating the platform, including payment processors (for MYR transactions via Touch n Go eWallet, Boost, DuitNow, Maybank FPX, CIMB, and Public Bank), identity verification services, IT infrastructure providers, and customer support platform providers. All service providers are contractually bound to process data only on bones888's instructions and to maintain appropriate security standards.

5.2 Game Software Providers

bones888 integrates games from third-party certified software providers. These providers may receive anonymised or pseudonymised gaming session data for the purposes of game delivery, RNG certification compliance, and technical support. No personally identifiable information is shared with game software providers beyond what is strictly necessary for service delivery.

5.3 Regulatory Disclosure

bones888 may be required to disclose Member data to gaming regulatory authorities, financial intelligence units, law enforcement agencies, or courts of competent jurisdiction where required by applicable law. bones888 will notify Members of such disclosures where legally permitted to do so.

5.4 No Sale of Data

bones888 does not sell, rent, lease, or otherwise commercially exploit your personal data to third-party advertisers, data brokers, or marketing companies. Your data is not a product.

6. Cookies & Tracking Technologies

The bones888 platform uses cookies and similar tracking technologies to maintain login sessions, remember user preferences, detect fraud, and gather anonymous analytics data about platform usage. The following categories of cookies are used:

• Essential Cookies: Strictly necessary for the platform to function. These include session authentication cookies and security tokens. They cannot be disabled without preventing access to the bones888 platform.
• Functional Cookies: Used to remember your preferences, such as language settings and responsible gaming configurations, between sessions.
• Analytics Cookies: Used to collect anonymised data about how Members navigate and use the bones888 platform, to identify usability improvements. No personally identifiable information is included in analytics data.
• Security Cookies: Used to detect and prevent fraudulent activity, including account takeover attempts and bot traffic.

You may manage cookie preferences through your browser settings. Disabling essential cookies will prevent access to your bones888 account.

7. Data Retention

bones888 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and for as long as required by applicable law and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the duration of the Member's account and for a minimum of 5 years following account closure, in compliance with anti-money laundering retention requirements.
• Transaction records: Retained for a minimum of 7 years from the date of the transaction.
• Identity verification documents: Retained for a minimum of 5 years following account closure or the completion of the relevant transaction.
• Gaming activity logs: Retained for a minimum of 3 years from the date of the activity.
• Support communication records: Retained for a minimum of 2 years from the date of the last interaction.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with bones888's data disposal procedures.

8. Data Security

bones888 implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bones888 platform
• Encryption of sensitive data fields (including passwords and identity document data) at rest using industry-standard algorithms
• Role-based access controls restricting internal access to personal data on a need-to-know basis
• Regular security audits and vulnerability assessments of the bones888 platform infrastructure
• Multi-factor authentication requirements for administrative access to data systems
• Incident response procedures for detection, containment, and notification of data security breaches

While bones888 takes all reasonable precautions to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, bones888 will notify affected Members without undue delay and in accordance with applicable notification obligations.

9. Your Rights

As a bones888 Member, you have the following rights with respect to your personal data, subject to applicable law:

• Right of Access: You may request a copy of the personal data bones888 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Basic profile information may be updated directly in account settings; other corrections should be submitted to support.
• Right to Erasure: You may request deletion of your personal data in certain circumstances. Note that bones888 may be required to retain certain data for legal, regulatory, or audit purposes even following an erasure request.
• Right to Restrict Processing: You may request that bones888 restricts the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: You may request a copy of personal data you have provided to bones888 in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data where bones888 relies on legitimate interests as the legal basis for processing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the bones888 Data Protection team via the support channel. bones888 will respond to verified requests within 30 calendar days. We may need to verify your identity before processing a data rights request.

10. Children's Privacy

The bones888 platform is strictly for adults aged 21 years and above. bones888 does not knowingly collect personal data from individuals under the age of 21. If bones888 discovers or is notified that it has inadvertently collected data from a person under 21, that individual's account will be immediately suspended and all personal data associated with the account will be securely deleted following an investigation. If you believe that a person under the age of 21 has created a bones888 account, please contact our support team immediately.

11. Cross-Border Data Transfers

bones888 operates infrastructure that may be located in jurisdictions outside of Malaysia. Where personal data is transferred to servers or service providers in other countries, bones888 ensures that appropriate safeguards are in place, such as contractual data protection clauses equivalent to or exceeding the standards required under applicable Malaysian data protection law. By using the bones888 platform, you acknowledge that your personal data may be processed in jurisdictions outside Malaysia in connection with the delivery of our services.

12. Third-Party Links

The bones888 platform may contain links to other websites or resources. This Privacy Policy applies solely to the bones888 platform and does not govern the data practices of any third-party websites. bones888 is not responsible for the privacy practices or content of any third-party sites. You should review the privacy policies of any third-party sites you visit independently.

13. Policy Updates

bones888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform operations. Material changes to this Policy will be notified to Members via the registered email address and/or a notice displayed upon login at least 14 days before the updated Policy takes effect, except where an immediate update is required by law or to address a security incident. The "Last Updated" date at the top of this Policy will always reflect the most recent revision. Continued use of the bones888 platform following notification of changes constitutes your acceptance of the revised Privacy Policy.

14. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a complaint about bones888's data handling practices, please contact our support team:

Email: [email protected]

Live Chat: Available 24/7 via the bones888 platform after logging in to your account.

bones888 will acknowledge your data-related enquiry within 5 business days and provide a substantive response within 30 calendar days. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.