Privacy Policy — bonus888j

Introduction

This Privacy Policy (hereinafter "the Policy") is issued by bonus888j (hereinafter "the Platform", "we", "us", or "our") and governs the collection, use, storage, disclosure, and protection of personal data provided by or collected from users (hereinafter "you", "the Player", or "the User") of the bonus888j online gaming and sports betting platform, accessible at https://bonus888j.cam.

bonus888j is a Malaysia-focused platform offering slots, live dealer games, Sic Bo, and real-time sports betting — including coverage of the English Premier League, Liga Super Malaysia, La Liga, and UFC events popular with Malaysian players. In the course of providing these services, we necessarily collect and process certain categories of personal information in order to manage your account, process financial transactions in Malaysian Ringgit (MYR), verify your identity, and comply with applicable regulatory obligations.

This Policy applies to all personal data collected through the bonus888j website, any associated mobile-optimised interfaces, customer support communications (including live chat and email), and any other touchpoint through which you interact with the Platform.

Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings assigned to them below:

• "Personal Data" — any information that identifies or could reasonably be used to identify a natural person, including but not limited to full name, identification number, email address, payment account details, IP address, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure by transmission, dissemination, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, bonus888j acts as the Data Controller.
• "Data Processor" — a third party that processes personal data on behalf of the Data Controller, subject to the instructions of and a data processing agreement with the Controller.
• "Cookies" — small text files placed on your device by the Platform's web server, used to store session information, user preferences, and analytical data.
• "KYC" — Know Your Customer; the identity verification process required under applicable anti-money laundering and counter-terrorism financing frameworks.
• "MYR / RM" — Malaysian Ringgit, the primary transaction currency of the bonus888j platform.

Data Controller

bonus888j acts as the Data Controller in respect of all personal data collected directly from players through the Platform. As Data Controller, we are responsible for determining the purposes for which your personal data is processed and for ensuring that such processing is carried out in accordance with applicable data protection principles.

Where we engage third-party service providers to process personal data on our behalf — for example, payment processors handling MYR transactions via Touch 'n Go eWallet, DuitNow, FPX, or Malaysian banking partners such as Maybank, CIMB, or Public Bank — those providers act as Data Processors and are contractually required to process data only on our documented instructions and in accordance with appropriate security standards.

For any data protection enquiries, requests, or complaints, you may contact us via the details provided in Section 16 of this Policy.

Data We Collect

We collect personal data in the following categories, depending on how you interact with the Platform:

4.1 Registration & Account Data

When you register an account on bonus888j, we collect:

• Full legal name
• Date of birth (for age verification — 21+ requirement)
• Email address
• Mobile phone number (where provided)
• Residential address (city and country, including Malaysian city references where applicable)
• Username and encrypted password

4.2 Identity Verification (KYC) Data

To comply with applicable regulatory requirements and to process withdrawal requests, we may collect:

• Malaysian MyKad number or passport number
• Scanned or photographed copies of government-issued identity documents
• Proof of address documents (e.g., utility bills, bank statements dated within the past 90 days)
• Selfie or live photo verification where required by our compliance process

4.3 Financial & Transaction Data

In connection with deposits and withdrawals, we collect:

• Deposit and withdrawal amounts in MYR
• Payment method details (e-wallet account references for Touch 'n Go eWallet, Boost, GrabPay, DuitNow; bank account numbers for FPX, Maybank, CIMB, Public Bank, Hong Leong transactions)
• Transaction timestamps and reference numbers
• Cryptocurrency wallet addresses where applicable

4.4 Technical & Usage Data

When you access the Platform, we automatically collect:

• IP address and approximate geolocation
• Device type, browser type, and operating system version
• Session duration, pages visited, and in-platform navigation patterns
• Game activity logs (games played, wagers placed, bet amounts, outcomes)
• Login timestamps and frequency

4.5 Communications Data

When you contact our support team via live chat or email, we retain a record of:

• The content of your communications
• The date, time, and channel of contact
• Any resolution or action taken in response to your enquiry

How We Use Your Data

bonus888j processes personal data for the following specific purposes:

Legal Basis for Processing

We rely on one or more of the following legal bases when processing your personal data:

• Contractual necessity: Processing required to perform our contractual obligations to you as a registered player — including account management, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, counter-terrorism financing (CTF) rules, and the KYC requirements of our licensing framework.
• Legitimate interests: Processing carried out in pursuit of our legitimate business interests, such as fraud prevention, platform security, and improving the player experience — provided such interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given and specific consent, such as for marketing communications. You may withdraw consent at any time by contacting our support team or using opt-out mechanisms provided in our communications.

Data Sharing & Disclosure

bonus888j does not sell, rent, or trade personal data. We may share your information with third parties only in the following circumstances:

7.1 Payment Processing Partners

To process MYR deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and partnered Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong Bank), we share the minimum payment-related data required by those processors to execute the transaction. These parties act as independent data controllers or as processors under contract and are bound by their own privacy policies and applicable financial regulations.

7.2 Identity Verification Services

KYC documents submitted for identity verification may be shared with authorised third-party identity verification providers. These providers are contractually required to use your data solely for the purpose of verifying your identity on our behalf and may not use it for any other purpose.

7.3 Fraud Prevention & Security

Technical and transactional data may be shared with fraud prevention services and security infrastructure providers to detect and prevent unauthorised account access, money laundering, and other fraudulent activity.

7.4 Legal & Regulatory Disclosure

We may disclose personal data to governmental authorities, law enforcement agencies, or regulatory bodies where required by applicable law, court order, or regulatory direction. We will, where legally permitted to do so, endeavour to notify you of any such disclosure.

7.5 Corporate Transactions

In the event of a merger, acquisition, or sale of all or substantially all of the Platform's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and any material changes to data processing practices that may result.

Cookies & Tracking Technologies

bonus888j uses cookies and similar tracking technologies on the Platform to ensure proper functionality, enhance user experience, and gather analytical data about how players interact with the site. The types of cookies used include:

• Strictly necessary cookies: Required for the Platform to function correctly — including maintaining your login session, storing your currency preference (MYR), and ensuring secure navigation between pages. These cannot be disabled without impairing core functionality.
• Functional cookies: Used to remember your preferences and settings, such as your preferred game category or communication language, so they persist across sessions.
• Analytical cookies: Used to collect aggregated, anonymised data about how players use the Platform — which pages are visited most often, how long sessions last, and where users exit. This data helps us improve the platform experience.
• Security cookies: Used to detect suspicious or anomalous session behaviour for fraud prevention purposes.

You may manage or disable non-essential cookies through your browser settings. However, doing so may affect the functionality of the Platform. Continued use of bonus888j with cookies enabled constitutes your acceptance of our use of cookies as described above.

Data Retention

We retain personal data for as long as is necessary to fulfil the purposes for which it was collected, including any regulatory retention obligations that may apply. The following general retention periods apply:

• Account data: Retained for the duration of your active account, and for a period of five (5) years following account closure, to satisfy anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with applicable financial regulations.
• KYC documents: Retained for a minimum of five (5) years following the completion of the KYC process or the closure of your account, whichever is later.
• Communications data: Retained for up to two (2) years from the date of the communication, unless ongoing dispute or legal proceedings require longer retention.
• Analytical and technical data: Retained in anonymised or aggregated form indefinitely for platform improvement purposes. Identifiable technical data is deleted within twelve (12) months of collection.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.

International Data Transfers

bonus888j operates under international online gaming licensing, and some of the third-party service providers we engage may be located in jurisdictions outside Malaysia. As a result, your personal data may be transferred to and processed in countries other than your country of residence.

Where personal data is transferred internationally, we take steps to ensure that appropriate safeguards are in place to protect your information in accordance with the standards set out in this Policy. These safeguards may include contractual data processing agreements, standard contractual clauses, or reliance on adequacy decisions applicable to the receiving jurisdiction.

By using the bonus888j platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia as described in this section.

Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by bonus888j:

• Right of access: You may request a copy of the personal data we hold about you and information about how it is processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you. You may also update many of your account details directly through the Account settings page.
• Right to erasure: In certain circumstances, you may request the deletion of your personal data. Note that this right is subject to overriding legal and regulatory retention obligations — we cannot delete data that we are legally required to retain.
• Right to restriction of processing: You may request that we limit the processing of your personal data in specific circumstances, such as while a rectification request is being assessed.
• Right to data portability: Where processing is based on your consent or a contract, and is carried out by automated means, you may request that we provide your personal data to you in a structured, machine-readable format.
• Right to object: You may object to the processing of your personal data where it is based on our legitimate interests, including for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact our support team via live chat or at [email protected]. We will respond to all verifiable requests within a reasonable timeframe, typically within 30 days.

Children & Minors

The bonus888j platform is strictly prohibited for use by persons under the age of 21. We do not knowingly collect or process personal data from persons under 21 years of age. This requirement is enforced through age verification during registration and through the KYC process prior to any withdrawal.

If we become aware that personal data has been collected from a person under the age of 21 without appropriate age verification, we will take immediate steps to delete that data and close the associated account. Parents or guardians who believe a minor has accessed the Platform should contact us immediately at [email protected].

Security Measures

bonus888j implements a comprehensive range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Encrypted storage for sensitive personal data, including KYC documents and payment information
• Role-based access controls limiting access to personal data to authorised personnel only
• Regular security audits and vulnerability assessments
• Two-factor authentication options for player account security
• Intrusion detection and anomaly monitoring systems
• Staff training on data protection obligations and information security practices

Notwithstanding these measures, no method of electronic transmission or storage is 100% secure. While we take all reasonable precautions, we cannot guarantee absolute security of your personal data. You are encouraged to use a strong, unique password for your bonus888j account and to enable any available two-factor authentication.

Third-Party Links

The bonus888j platform may contain links to third-party websites or services operated independently of bonus888j. This Privacy Policy applies solely to data processed by the bonus888j platform. We have no control over and accept no responsibility for the privacy practices, data collection, or content of any third-party websites.

We encourage you to review the privacy policies of any third-party sites you visit, including payment processors, before providing them with any personal information.

Policy Updates

bonus888j reserves the right to update, revise, or replace this Privacy Policy at any time. Any changes will be published on this page with a revised effective date prominently displayed. Where changes are material — particularly changes affecting the purposes for which we process your data or the third parties with whom we share it — we will endeavour to provide advance notice via email or in-platform notification to registered players.

Your continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with any material change to this Policy, you should contact us to discuss your options, which may include account closure.

This Privacy Policy was last reviewed and updated on 1 January 2026. Previous versions are available on request.

Contact Us

If you have any questions, concerns, or requests in connection with this Privacy Policy or the processing of your personal data by bonus888j, please contact us through the following channels. All data-related enquiries are handled by our support team in English, with response during Malaysian business hours (GMT+8).