bolauae1 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how bolauae1 ("the Company", "we", "us", "our") collects, uses, stores, and protects the personal data of individuals ("you", "Player", "User") who access or use the bolauae1 online gaming platform at https://bolauae1.cam and all associated services (collectively, "the Platform").

bolauae1 is an internationally licensed online gaming operator serving players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam. As an operator that processes personal data belonging to real individuals, we take our data protection obligations seriously. This Policy is designed to be clear, specific, and actionable — not a document you need a lawyer to interpret.

By registering an account, depositing funds, placing a bet, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must cease use of the Platform immediately.

2. Definitions

For the purposes of this Policy, the following terms carry the meanings assigned below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, phone number, date of birth, payment details, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, bolauae1.
• "Processor" means a third party that processes Personal Data on behalf of the Controller, under contract and subject to data protection obligations.
• "Consent" means freely given, specific, informed, and unambiguous agreement to the processing of your Personal Data.
• "KYC Data" means identity and age verification documents submitted during the Know Your Customer process, including government-issued ID and proof of address.
• "Cookie" means a small data file stored on your device by the Platform for the purposes described in Section 7.

3. Personal Data We Collect

We collect personal data through three primary channels: information you provide directly, information generated automatically through your use of the Platform, and information received from third parties such as payment processors and identity verification services.

3.1 Information You Provide Directly

• Full legal name, date of birth, and nationality
• Email address, mobile phone number, and residential address
• Government-issued identification documents (Malaysian IC, passport) submitted for KYC verification
• Payment method details necessary to facilitate deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, Maybank, CIMB, Public Bank, Hong Leong Bank, or cryptocurrency wallets
• Communications you send to our support team via live chat or email
• Self-exclusion preferences and responsible gambling settings

3.2 Information Collected Automatically

• IP address, browser type, operating system, and device identifiers
• Session duration, pages viewed, and navigation paths within the Platform
• Login timestamps and account activity logs
• Betting and gaming history, including wager amounts, game selections, and outcomes
• Cookie data and similar tracking technologies (see Section 7)

3.3 Information from Third Parties

• Identity and age verification outcomes from our KYC service providers
• Transaction confirmation data from payment processors
• Fraud and sanctions screening results from compliance service providers

4. Legal Basis for Processing

bolauae1 processes your personal data only where a valid legal basis exists. The applicable legal bases are as follows:

5. How We Use Your Personal Data

bolauae1 uses your personal data strictly for the purposes described below. We do not use your data for any purpose incompatible with the reason it was originally collected.

• Account Services: To register, maintain, and authenticate your account; to process your deposits and withdrawals in MYR; to credit bonuses and process VIP tier rewards.
• Regulatory Compliance: To verify your identity and age (21+) in accordance with our licence obligations; to conduct anti-money laundering (AML) and sanctions screening; to maintain records required by our regulatory authority.
• Platform Security: To detect and prevent fraud, collusion, bonus abuse, and other prohibited activity; to investigate suspicious account behaviour; to protect the integrity of our games and sports betting markets.
• Customer Support: To respond to your enquiries, complaints, and dispute requests submitted via live chat or email at [email protected].
• Responsible Gambling: To monitor your gaming activity for signs of problem gambling; to enforce self-exclusion periods, deposit limits, and cool-off periods you have set; to proactively contact you if our systems identify concerning patterns.
• Platform Improvement: To analyse Platform usage patterns, identify technical issues, and develop new features that improve the experience for Malaysian players.
• Marketing (Consent Only): To send you promotional communications about new games, bonuses, and offers — only if you have explicitly opted in. You may withdraw this consent at any time by contacting our support team.

6. Data Sharing & Disclosure

bolauae1 does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary.

6.1 Service Providers (Data Processors)

We engage carefully selected third-party service providers to assist in operating the Platform. These providers act as Data Processors under contract and are bound by strict confidentiality and data protection obligations. Categories of processors include:

• Payment processing partners (DuitNow, FPX, and e-wallet operators)
• KYC and identity verification service providers
• Cloud hosting and data centre providers
• Fraud detection and AML screening services
• Customer support platform providers
• Licensed game studio partners (who receive only anonymised game session data)

6.2 Regulatory and Legal Disclosure

We may disclose your personal data to our licensing authority, law enforcement agencies, financial intelligence units, or courts where we are required to do so by applicable law, a court order, or a valid regulatory request. We will notify you of such disclosure where legally permitted.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of the business or its assets, your personal data may be transferred to the acquiring entity. You will be notified prior to such transfer and given the opportunity to exercise your data rights.

7. Cookies & Tracking Technologies

bolauae1 uses cookies and similar tracking technologies to operate the Platform effectively, maintain session continuity, and understand how players interact with our services. Cookies are small text files stored on your device by your browser.

Types of Cookies We Use:

• Strictly Necessary Cookies: Required for the Platform to function. These cannot be disabled without affecting Platform operation (e.g., session authentication, security tokens).
• Functional Cookies: Remember your preferences such as language settings and responsible gambling limits you have configured.
• Analytics Cookies: Collect anonymised data about how players navigate the Platform, which pages are visited most, and where technical errors occur. This data helps us improve the user experience.
• Marketing Cookies: Used only where you have given explicit consent. These help us show you relevant promotions on the Platform. We do not use marketing cookies for cross-site advertising.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Platform.

8. Data Retention

bolauae1 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations.

• Account Data: Retained for the duration of your account and for 5 years following permanent account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction Records: Financial transaction data (deposits, withdrawals, bet history) is retained for a minimum of 7 years from the date of the transaction to satisfy regulatory audit requirements.
• KYC Documents: Identity verification documents are retained for 5 years following account closure or the end of the business relationship.
• Support Communications: Correspondence with our support team is retained for 3 years and may be referred to in the event of a dispute.
• Marketing Data: Retained until you withdraw consent, after which it is deleted within 30 days.
• Anonymised Analytics Data: May be retained indefinitely as it can no longer be linked to an identifiable individual.

Following the expiry of the applicable retention period, data is securely deleted or irreversibly anonymised using methods consistent with industry best practices.

9. Data Security Measures

bolauae1 implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers
• AES-256 encryption for sensitive data stored at rest
• Multi-factor authentication requirements for staff accessing production systems
• Regular penetration testing and vulnerability assessments by independent security firms
• Role-based access controls ensuring staff can only access data necessary for their specific function
• Payment card and e-wallet data processed exclusively through PCI-DSS compliant payment partners — bolauae1 does not store full payment card numbers on its own servers
• 24/7 security monitoring and automated threat detection systems

10. Your Data Rights

As a data subject, you have the following rights with respect to your personal data held by bolauae1. To exercise any of these rights, please submit a written request to our support team at [email protected]. We will acknowledge your request within 5 business days and respond in full within 30 days.

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request correction. Account holders may update basic profile information directly through account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent. Note that regulatory retention obligations (see Section 8) may limit the immediate exercise of this right for certain data categories.
• Right to Restrict Processing: You have the right to request that we limit the processing of your data in certain circumstances, for example while a complaint or dispute is being investigated.
• Right to Data Portability: Where processing is based on consent or contract, you may request that we provide your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling for direct marketing purposes. We will cease such processing upon receipt of a valid objection unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

11. International Data Transfers

As an internationally licensed operator, bolauae1 may transfer your personal data to, and store it in, countries outside your country of residence in order to deliver the Platform and related services. These transfers are made to countries that have been assessed as providing an adequate level of data protection, or are subject to appropriate safeguards such as contractual standard clauses.

Where your data is transferred to a service provider operating in a jurisdiction without a formal adequacy decision, we ensure that the transfer is governed by binding contractual obligations that require the recipient to protect your data to a standard equivalent to that described in this Policy.

By using the Platform, you acknowledge and consent to such international transfers where necessary for the provision of the Service.

12. Minors & Age Policy

The bolauae1 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21.

During account registration and KYC verification, we take steps to confirm that each player meets the minimum age requirement. If we become aware that a person under the age of 21 has provided personal data to us, we will take immediate steps to:

• Suspend the account permanently
• Delete all associated personal data as promptly as regulatory obligations permit
• Return any deposited funds to the source payment method

If you believe an individual under 21 has registered an account on bolauae1, please notify us immediately at [email protected].

13. Amendments to This Policy

bolauae1 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform features. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify registered players by email or a prominent notice on the Platform at least 7 days before the changes take effect
• For significant changes that affect how we process your data, seek fresh consent where required by applicable law

We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of an updated Policy constitutes your acceptance of the revised terms. If you do not accept the changes, you must stop using the Platform and request account closure.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by bolauae1, please contact our Data Protection team using the details below. We are committed to addressing your query promptly and transparently.

For formal data subject access requests, erasure requests, or complaints that have not been resolved to your satisfaction through our internal process, you may also escalate the matter to the relevant data protection supervisory authority in the jurisdiction under which bolauae1 is licensed.