Privacy Policy bonos138 – Our Commitment to Your Data Protection

01Introduction & Policy Scope

This Privacy Policy applies to all users of the bonos138 platform operating under the domain bonos138.pro, including the website, Android and iOS mobile apps, and all services provided by bonos138.

By using the bonos138 platform, you agree to the collection, use, and processing of your personal data as outlined in this Privacy Policy. This policy forms an inseparable part of Terms and Conditions us.

Bonos138 is committed to complying with Malaysia's Personal Data Protection Act (PDPA) 2010 and internationally recognised data protection principles. We ensure that:

• Your personal data is collected fairly and lawfully.
• Information is used only for clearly stated purposes.
• Data is stored securely and retained no longer than necessary.
• You have full control over your personal data.

02Types of Personal Data Collected

Bonos138 collects several types of personal information to provide you with a secure, efficient, and personalized experience. The data collected includes:

03Purpose of Data Collection & Use

Every piece of data we collect has a clear and legitimate purpose. bonos138 uses your personal information for the following purposes:

• Identity Verification & KYC: Verifying your identity during registration and the withdrawal process to prevent fraud and comply with anti-money laundering (AML) laws.
• Transaction Processing: Processing deposits and fund withdrawals safely and accurately to the bank account registered in your name.
• Account Management: Managing your account, including password resets, two-factor authentication (2FA), and security notifications.
• Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, multiple account usage, and platform abuse.
• Customer Support: Assisting you with any inquiries, complaints, or technical issues raised through our support channels.
• Legal Compliance: Fulfilling applicable legal and regulatory obligations, including retaining transaction records as required by the authorities.
• Platform Improvement: Analyzing usage patterns in aggregate (without identifying individuals) to improve the user experience and platform services.
• Marketing Communications: Sending promotional notifications and bonus offers — only if you have agreed to receive them.

04Data Collection Method

Bonos138 collects your personal data through various lawful and transparent channels:

• Account Registration: Information you provide directly when filling out the registration form on the bonos138 website or app.
• KYC Process: Identity verification documents you upload when requested, including MyKad photos and bank statements.
• Platform Usage: Data automatically generated when you use our services, such as activity logs, game history, and transaction records.
• Customer Support: Information you share when contacting our support team via Live Chat, email, or WhatsApp.
• Cookie Technology: Data collected through cookies and similar tracking technologies when you browse our platform.
• Third-Party Verification: Information received from payment service providers (such as FPX and DuitNow) during financial transaction processing.

All our data collection methods are transparent and you are always informed about the data collected at every stage of interaction with the bonos138 platform.

05Data Storage & Security

Your data security is the top priority at bonos138. We implement multiple layers of technical and organizational protection to keep your data safe at all times:

• 256-bit SSL Encryption: All data transferred between your device and bonos138 servers is protected with the same industry-grade encryption used by leading financial institutions.
• Secure Server: Data is stored in data centres equipped with strict physical access controls, 24/7 monitoring, and automatic backup systems.
• Internal Access Control: Only bonos138 staff who require data access to perform their duties are permitted to do so, with all access logged and monitored.
• Two-Factor Authentication: bonos138 internal systems use two-factor authentication to prevent unauthorised access to user databases.
• Security Auditing: Our security systems are regularly audited by independent third parties to identify and address any vulnerabilities.

Data Retention Period: bonos138 retains your personal data for as long as your account remains active. Once your account is closed, data will be kept for the minimum period required by Malaysian law (typically 7 years for financial records) before being securely deleted.

06Third-Party Data Sharing

Bonos138 does not sell or trade your personal data. However, we do share certain information with trusted third parties in limited and lawful circumstances:

• Payment Service Provider: Required transaction information is shared with providers such as FPX, DuitNow, and other payment processors to complete your financial transactions.
• Game Software Provider: Minimal technical data is shared with game providers to resolve any disputes related to game outcomes.
• Identity Verification Services: Identity information is shared with third-party KYC services for verification and AML compliance purposes.
• Legal Authorities: bonos138 will disclose personal data if required by Malaysian law, court order, or instruction from lawful authorities.

All third-party providers we use are bound by strict data confidentiality agreements and are required to comply with data protection standards equivalent to or higher than those we practice.

07User Rights Regarding Personal Data

As a bonos138 user and Malaysian citizen or resident, you have the following rights under PDPA 2010:

• Right to Access: You have the right to request a copy of the personal data we hold about you at any time.
• Right to Rectification: If any information we hold is inaccurate or outdated, you have the right to request a correction by submitting appropriate evidence.
• Right to Restriction: You may request that we restrict the processing of your data under certain circumstances, such as when you are disputing the accuracy of the data.
• Right to Withdraw Consent: You may withdraw consent for marketing communications at any time without affecting the core services you receive.
• Right to Erasure: You may request deletion of your personal data after account closure, subject to applicable legal retention obligations.
• Right to Complain: If you believe your data has been misused, you have the right to lodge a complaint with the Malaysia Personal Data Protection Commissioner.

To exercise any of the above rights, contact the bonos138 support team through available channels. We will process your request within 14 working days.

08Cookies & Tracking Technology

Bonos138 uses cookies and similar technologies to enhance user experience and ensure platform functionality runs smoothly. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions, security, and language preferences. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how users interact with the platform to help us identify technical issues and improve performance.
• Functional Cookies: Saving your preferences such as display settings and frequently used game selections for a more personalized experience.
• Analytics Cookies: Helping us understand overall usage patterns for platform improvement purposes — this data is processed in aggregate and does not identify individuals.

You can manage cookie settings through your browser. However, disabling certain cookies may affect the functionality of the bonos138 platform. For more information on managing cookies, refer to your browser's help section.

09Cross-Border Data Transfer

In the course of its operations, bonos138 may transfer your personal data to servers or systems located outside Malaysia, particularly for payment processing, identity verification, and gaming software provision purposes.

All cross-border data transfers are executed with adequate safeguards, including:

• Data transfer agreements compliant with Malaysia PDPA with all international partners.
• Ensuring that the recipient country has equivalent or higher data protection standards.
• Use of end-to-end encryption for all data transferred.

10Children's Privacy

Bonos138 is an online gambling platform that available to users aged 18 and above only. We do not knowingly collect any personal data from individuals under the age of 18.

If you believe we have inadvertently collected data from someone under the age of 18, please contact us immediately at [email protected]. We will take immediate steps to delete that information and close the account in question.

Bonos138 employs an age verification process during registration and conducts KYC checks to ensure compliance with established age limits. This is part of our commitment to Responsible Gaming.

11Privacy Policy Amendments

Bonos138 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements.

• Any material amendments will be notified to you via in-platform notification or email to your registered address.
• The "Updated" date at the top of this page shows the last date this Privacy Policy was reviewed.
• Continued use of the bonos138 platform after amendments take effect means you accept the updated terms.
• If you do not agree with any amendments, you have the right to stop using the platform and request account closure.

We encourage you to review this page regularly to stay informed about how we protect your information.

12Contact Us Regarding Privacy

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact the bonos138 Privacy Officer: