How We Protect Your Data
AES-256 Encryption at Rest
All personal data stored on bonus888h servers is encrypted using AES-256 — the same standard used by financial institutions worldwide. Data transit is protected by TLS 1.3.
We Never Sell Your Data
bonus888h does not sell, rent, or trade your personal information to third-party advertisers, data brokers, or marketing networks. Your data belongs to you.
Data Minimisation Principle
We collect only the personal data that is strictly necessary for the purpose at hand — registration, KYC verification, payment processing, and fraud prevention. Nothing beyond what is needed.
Your Rights Are Protected
You have the right to access, correct, and request deletion of your personal data at any time. We respond to all verifiable data requests within 14 business days.
Clear Retention Limits
Personal data is retained only as long as required for the purpose it was collected, or as mandated by applicable regulations. Once no longer needed, data is securely deleted or anonymised.
Strict Internal Access Controls
Access to player personal data within bonus888h is restricted on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations and regular training.
Introduction
This Privacy Policy ("Policy") describes how bonus888h ("we", "us", "our", "the Platform") collects, uses, stores, and protects personal data relating to individuals ("you", "Player "User") who access or use the bonus888h website and associated services athttps://bonus888h.cam.
We are committed to protecting your privacy and processing your personal data in a manner that is transparent, fair, and consistent with applicable data protection legislation and principles. This Policy is intended to inform you clearly and completely about our data practices so that you can make informed decisions about your engagement with the Platform.
By creating an account on bonus888h, you acknowledge that you have read this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not create an account or continue to use the Platform.
This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform. In the event of a conflict between this Policy and the Terms, the Terms shall prevail except in matters that are exclusively governed by applicable data protection law.
Definitions
For the purposes of this Privacy Policy, the following definitions apply:
- "Personal Data" means any information that relates to an identified or identifiable natural person. This includes but is not limited to name, email address, phone number, date of birth, financial account details, and IP address.
- "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, and deletion.
- "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, bonus888h.
- "Data Processor" means any third party that processes Personal Data on behalf of the Data Controller under a written agreement.
- "KYC Data" means identity and document verification data collected as part of the Know Your Customer compliance process, including government-issued identification documents and proof of address.
- "Cookies" means small text files placed on your device by the Platform to facilitate session management, analytics, and functionality.
- "Third Party" means any entity other than you and bonus888h, including but not limited to payment processors, game providers, and analytics services.
Data Controller Details
bonus888h acts as the Data Controller for all personal data collected through the Platform. As Data Controller, we determine the purposes for which your personal data is collected and the means by which it is processed.
All data protection enquiries, subject access requests, and requests to exercise your rights under this Policy should be directed to our support team via the contact details provided in Section 14of this Policy. We aim to respond to all verifiable requests within fourteen (14) business days of receipt.
Where bonus888h engages third-party Data Processors (for example, payment gateway operators processing your transaction data), those parties process your data exclusively on our behalf and under contractual terms that require them to maintain appropriate data protection standards consistent with this Policy.
Personal Data We Collect
bonus888h collects personal data through several channels: directly from you during registration and account management; automatically when you use the Platform; and, in limited circumstances, from third parties such as payment processors and fraud prevention services.
The categories of personal data we collect are described in the table below:
| Category | Specific Data Points | Source |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number (e.g., MyKad) | Provided by you at registration or KYC |
| Contact Data | Email address, Malaysian mobile phone number, residential address | Provided by you at registration |
| Financial Data | Payment method details (e.g., registered e-wallet identifier, bank account name), transaction history, deposit and withdrawal records | Provided by you or received from payment processors |
| KYC Documents | Scanned copies or photographs of valid government-issued ID, proof of address documents, payment method ownership evidence | Provided by you during KYC verification |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps, referring URL | Collected automatically via cookies and server logs |
| Usage Data | Pages visited, games played, bets placed, session duration, feature interactions, search queries within the Platform | Collected automatically via analytics tools |
| Communications Data | Records of live chat, email, and WhatsApp correspondence with the support team | Collected during support interactions |
| Responsible Gambling Data | Self-imposed deposit limits, session, self-exclusion requests, cooling-off period activations | Provided by you via account settings |
We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, except where such data forms part of a KYC document submitted by you (for example, nationality data on a passport). In such cases, we collect only what appears on the document and use it solely for identity verification purposes.
Purposes of Processing & Legal Basis
bonus888h processes your personal data for the following specific purposes, each of which is supported by an identified legal basis:
- Account Registration and Management: Processing your identity and contact data to create and manage your player account. Legal basis: Performance of contract.
- Identity Verification (KYC): Verifying your identity and age eligibility as required by applicable regulations and our internal compliance programme. Legal basis: Legal obligation and legitimate interests (fraud prevention).
- Payment Processing: Processing deposit and withdrawal transactions via your chosen payment method — including Touch'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, and other supported channels. Legal basis: Performance of contract.
- Platform Operation and Security: Using technical and usage data to maintain platform stability, detect and prevent unauthorised access, and investigate suspected fraud or abuse. Legal basis: Legitimate interests.
- Responsible Gambling Compliance: Using account activity and self-imposed limit data to monitor for indicators of problem gambling and to enforce player-requested restrictions. Legal basis: Legal obligation and legitimate interests.
- Customer Support: Using your identity, contact, and communications data to respond to your queries, complaints, and support requests. Legal basis: Performance of contract.
- Legal and Regulatory Compliance: Retaining transaction records and identity data as required by applicable financial crime, anti-money laundering, and regulatory reporting obligations. Legal basis: Legal obligation.
- Service Improvement and Analytics: Using anonymised or aggregated usage data to understand how the Platform is used and to improve the user experience. Legal basis: Legitimate interests.
Where processing is based on your consent (for example, for certain cookie categories), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Consent withdrawal can be exercised through your account settings or by contacting the support team.
Data Sharing & Disclosure
bonus888h does not sell, rent, or otherwise commercially disclose your personal data to third parties. We may share your personal data with the following categories of recipients, strictly where necessary and under appropriate safeguards:
- Payment Service Providers: To facilitate deposits and withdrawals, we share necessary financial and identity data with your chosen payment processor (for example, the operator of Touch 'n Go eWallet, Boost eWallet, GrabPay, or the relevant FPX-connected bank). These parties act as independent data controllers for their own services or as data processors under contract with us.
- Game Providers: Live casino and slot game providers may receive limited session data (such as a pseudonymous player identifier and session token) required to operate the game session. Game providers do not receive your full personal profile.
- Identity Verification Services: Third-party KYC verification providers may process your identity documents to assist with the verification process under contractual data processing terms.
- Fraud Prevention and Security Services: We may share technical data (IP address, device fingerprint, behavioural signals) with fraud detection services to protect the Platform and its players.
- Regulatory and Law Enforcement Authorities: We may be required to disclose personal data to regulatory authorities, law enforcement agencies, or courts where required or permitted by applicable law. We will inform you of such disclosures where legally permitted to do so.
- Professional Advisers: Lawyers, auditors, and compliance consultants may receive limited personal data under obligations of professional confidentiality in connection with the operation of the Platform.
All third-party Data Processors engaged by bonus888h are required to maintain appropriate technical and organisational security measures and to process personal data only on our documented instructions.
Data Retention
bonus888h retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. Our general retention approach is as follows:
- Active account data (identity, contact, financial records) is retained for the duration of your account's existence and for a period of at least five (5) years following account closure, in compliance with anti-money laundering and financial records retention requirements.
- KYC documents are retained for a minimum of five (5) years following the last transaction associated with the account, or longer if required by applicable law.
- Transaction records are retained for a minimum of seven (7) years to comply with financial record-keeping obligations.
- Support communications are retained for up to three (3) years following the last interaction, to assist with dispute resolution and quality assurance.
- Technical and usage data from analytics is retained in aggregated or pseudonymised form for up to twenty-four (24) months.
- Responsible gambling records (self-exclusion, deposit limits) are retained for a minimum of the period of restriction plus five (5) years, to prevent re-registration during an exclusion period.
When data is no longer required and no legal retention obligation applies, it is securely deleted or anonymised in a manner that prevents re-identification.
Security Measures
bonus888h implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- AES-256 encryption for personal data stored at rest on our servers
- TLS 1.3 encryption for all data transmitted between your device and the Platform
- Two-factor authentication (2FA) available for all player accounts
- Role-based access controls restricting internal data access to authorised personnel only
- Regular penetration testing and vulnerability assessments of the Platform infrastructure
- Comprehensive staff data protection training and confidentiality agreements
- 24/7 automated monitoring for anomalous account activity and potential security incidents
- Incident response procedures for timely identification, containment, and notification of data breaches
Notwithstanding these measures, no system of data transmission or storage can be guaranteed to be 100% secure. You are responsible for maintaining the security of your account credentials. If you suspect that your account has been compromised, you must contact us immediately.
Cookies & Tracking Technologies
bonus888h uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us provide, secure, and improve our services. The categories of cookies we use are as follows:
- Strictly Necessary Cookies: Essential to the operation of the Platform, including authentication session cookies and security tokens. These cannot be disabled without materially impairing Platform functionality. No consent is required for these cookies.
- Functional Cookies: Enable enhanced functionality such as remembering your language preference and display settings. These improve your experience but are not essential.
- Analytics Cookies: Used to understand how players use the Platform, which pages are visited most frequently, and where errors occur. Analytics data is aggregated and pseudonymised where possible. These cookies are only placed with your consent.
- Security and Fraud Prevention Cookies: Used to detect and prevent fraudulent or abusive activity, including device fingerprinting signals used by our fraud detection systems.
You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect your ability to use some features of the Platform. For strictly necessary and security cookies, disabling them in the browser may prevent you from logging into or using the Platform at all.
Your Data Rights
Subject to applicable law and certain limitations, you have the following rights in relation to your personal data held by bonus888h. To exercise any of these rights, please contact our support team using the details in Section 14.
Right of Access
You have the right to request a copy of the personal data we hold about you. We will provide a structured summary of your data within 14 business days of a verified request.
Right to Rectification
If any personal data we hold is inaccurate or incomplete, you have the right to request its correction. For account details, many fields can be updated directly in your account settings.
Right to Erasure
You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. We cannot delete data that we are legally required to retain.
Right to Object
You have the right to object to processing of your personal data where that processing is based on legitimate interests. We will assess whether our compelling grounds override your interests and respond accordingly.
Right to Data Portability
Where processing is carried out by automated means and based on your consent or a contract, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
Right to Restriction of Processing
In certain circumstances — for example, where you have contested the accuracy of your data or objected to processing — you may request that we restrict processing of your data while the matter is under review.
Minors & Age Protection
The bonus888h platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect, process, or retain personal data from individuals under the age of 21.
Age verification is a mandatory component of the registration and KYC process. Where bonus888h has reason to believe that a registered account belongs to a person under 21, the account will be immediately suspended pending investigation. Any funds held in such an account will be dealt with in accordance with applicable regulations.
If you are a parent or guardian and believe that a person under 21 in your care has registered an account with bonus888h, please contact us immediately at [email protected] so that we can investigate and take appropriate action.
🔞 21+ Only. bonus888h is an adult entertainment platform. Access by individuals under the age of 21 is strictly prohibited. For further information on our age verification process and responsible gambling tools, please visit our Responsible Gambling page.
International Data Transfers
In the course of operating the Platform and engaging service providers, your personal data may be transferred to, stored in, or processed in jurisdictions outside of Malaysia. Where such transfers occur, bonus888h ensures that appropriate safeguards are in place to protect your personal data to a standard at least equivalent to that which applies under the laws of your jurisdiction.
Safeguards applied to international data transfers may include contractual clauses requiring the recipient to maintain appropriate data protection standards, or transfers to jurisdictions with adequacy determinations in place under applicable law.
If you would like further information about the specific safeguards applied to international transfers of your personal data, please contact using the details provided in Section 14.
Updates to This Privacy Policy
bonus888h may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or Platform features. When material changes are made to this Policy, we will notify registered Players by email to the address on their account at least seven (7) days prior to the changes taking effect, except where immediate changes are required by law.
The "Last Updated" date at the top of this page always reflects the date of the most recent revision. We encourage you to review this page periodically. The current version of this Policy supersedes all prior versions.
Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not accept the updated Policy, you should discontinue use of the Platform and may request account closure.
Contact Us & Data Complaints
If you wish to exercise any of your data rights, have questions about this Privacy Policy, or wish to raise a complaint about how your personal data has been handled, please contact the bonus888h data protection team through the following channels:
- Email: [email protected] — please include "Privacy Request" or "Data Complaint" in the subject line to ensure prompt routing to the appropriate team.
- Live Chat: Available24/7 on the Platform. Identify yourself as raising a data protection matter and request escalation to the compliance team if required.
- WhatsApp: Available daily from 08:00 to 23:59 Malaysia Standard Time (MYT) for general support queries, including privacy enquiries.
We will acknowledge receipt of your request within five (5) business days and aim to provide a substantive response within fourteen (14) business days. For complex requests, we may extend this period by a further fourteen (14) days, in which case we will notify you of the extension and the reasons for it.
If you are not satisfied with our response to a data protection complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.
For queries specifically relating to responsible gambling tools — such as deposit limits, self-exclusion options, or cooling-off periods — please visit our Responsible Gambling page. These tools are available directly within your account settings and can also be activated by contacting our support team.
Questions About Your Data? We're Here to Help.
Our support team handles privacy and data requests in English, Bahasa Melayu, and Mandarin — around the clock via live chat, or by email. You can also explore the FAQ for quick answers to common questions.
🔞 bonus888h is strictly for players aged 21 and above. Please gamble responsibly.