Bolaking takes seriously its responsibility to protect the privacy of every member. This Privacy Policy transparently explains what data we collect, how it is used, who it is shared with, and your rights as a member. All information is written in clear, straightforward language so you truly understand what you are agreeing to — not just signing blindly.
Bolaking's Privacy Commitment to Malaysian Members
Six core principles that shape how Bolaking manages and protects your personal data
All data you transmit to Bolaking's servers — including personal information, payment details, and betting records — is encrypted using the same 256-bit SSL/TLS protocol adopted by major Malaysian financial institutions. Stored data is further protected with layered AES-256 encryption.
Bolaking has never and will never sell, rent, or trade members' personal data to any third party for marketing or other commercial purposes. Your data belongs to you — it is not a business asset for us to monetise without your knowledge and consent.
Bolaking only collects data that is strictly necessary to provide the platform's services, process payment transactions through Malaysian methods such as Touch 'n Go and DuitNow, meet legal compliance requirements, and safeguard the security of the platform and its members.
Every Bolaking member has the right to request a copy of their personal data held in our records, request correction of inaccurate data, apply for erasure of data under certain circumstances, and withdraw consent for non-mandatory data processing — all at no additional charge.
Active account data is retained for as long as your account remains active. Upon account closure, financial transaction data is kept for 7 years in accordance with Malaysian legal requirements. Marketing data such as notification preferences is deleted within 90 days of your consent being withdrawn.
You have full control over notifications and marketing communications from Bolaking. You may unsubscribe at any time through your account settings or via the unsubscribe link in any email. Your preference will take effect within 48 business hours.
Important Note: This Privacy Policy is effective from 1 January 2026 and is to be used in conjunction with Terms & Conditions Bolaking. By using the Bolaking platform, you confirm that you have read and understood this Privacy Policy. If you have any questions, please contact us at support@bolaking.best.
This Privacy Policy ("Policy") describes how Bolaking ("we", "the platform") collects, uses, stores, discloses, and protects your personal data when you use the bolaking.best website and all related services, including Sports Betting on leagues such as the Malaysia Super League and EPL, badminton, e-sports, Live Casino games, slots, poker, and all other online entertainment products offered under the Bolaking brand.
Bolaking operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international standards in personal data management. We believe transparency is the foundation of trust — and your trust is something we do not take lightly. That is why we have written this Privacy Policy in clear, plain language rather than confusing legal jargon.
This Policy applies to all registered Bolaking members across Malaysia, visitors who browse the platform without registering, and any party who interacts with Bolaking through our communication channels such as customer support email or live chat.
Our Commitment: Bolaking has never and will never sell members' personal data to any third party for commercial purposes. Your data is used solely to provide you with better service and to fulfil our legal obligations.
Bolaking collects various types of personal data depending on how you interact with our platform. Below is a detailed breakdown of each data category we collect:
This is data you provide directly when using the Bolaking platform:
Identity document information such as MyKad numbers and passport copies is only collected during the identity verification (KYC) process, which is required before your first withdrawal or when we are legally obligated to do so under Malaysian law.
When you use the Bolaking platform, our systems automatically record certain technical information needed to ensure the platform operates correctly and securely:
In certain circumstances, Bolaking may receive data from trusted third parties for the purposes of identity verification, risk assessment, or fraud prevention. This includes verification information from licensed KYC service providers, as well as necessary information from payment service providers such as Touch 'n Go, GrabPay, or DuitNow to validate financial transactions.
Bolaking uses members' personal data solely for legitimate and reasonable purposes. Below is a complete list of the purposes for which your data is used:
Bolaking uses your betting pattern data specifically for responsible gambling purposes — that is, to identify members who may benefit from support relating to their betting behaviour. Data used for this purpose is handled in your best interest and with full discretion. Information collected for this purpose is not shared with any third party except where required by law.
Legal Basis for Processing: All personal data processing at Bolaking is underpinned by a valid legal basis — whether that is your consent, a contractual requirement to provide the service, a legal obligation, or a legitimate interest that does not override your privacy rights.
Bolaking does not sell, rent or trade members' personal data to any party. However, there are limited situations where we need to share certain data with trusted third parties to keep the platform running. The following is a complete list of those situations:
We share necessary data with service providers working on our behalf under strict contractual agreements, and we do not permit them to use your data for any other purpose:
Bolaking may be required to disclose personal data to Malaysian authorities or relevant international bodies where mandated by law, court order, or a legitimate official investigation. We will notify you of any such disclosure where permitted to do so by law.
In the event of a merger, acquisition, or sale of Bolaking's assets, members' personal data may be transferred to the successor entity. In such circumstances, we will notify all members and ensure the successor entity adheres to the same or higher data protection standards before any transfer takes place.
Bolaking continually invests in data security infrastructure that meets and exceeds industry standards. Below is an overview of the technical and organisational security measures we implement to protect your personal data:
Access to members' personal data within Bolaking's internal systems is restricted to staff with a legitimate operational need. All access is logged and monitored. Staff who handle personal data are bound by strict confidentiality obligations under their employment agreements.
In the event of a data breach that may affect your personal data, Bolaking has established incident response procedures in place. We will notify affected members and the relevant authorities within the timeframe prescribed by Malaysian law, and will take immediate steps to mitigate the impact and prevent recurrence.
Clean Security Record: Since operations began, Bolaking has never experienced a data breach that exposed members' personal information to unauthorised parties. We continue to invest in security to maintain this record.
Bolaking uses cookies and similar tracking technologies to keep the platform running smoothly, enhance your experience, and understand how members interact with it. Here is an overview of the types of cookies we use:
| Cookie Type | Purpose | Duration | Can It Be Disabled? |
|---|---|---|---|
| Essential Cookies | Login sessions, security, and core platform functionality | Session / 24 hours | No (the platform will not function) |
| Preference Cookies | Storing your language, display, and preference settings | 1 year | Yes |
| Analytics Cookies | Usage statistics for platform improvement (aggregated data, no PII) | 30 days | Yes |
| Security Cookies | Detecting suspicious login attempts and preventing fraud | 30 minutes | No (required for security) |
You can manage your cookie preferences at any time through your web browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the Bolaking platform. Essential and security cookies cannot be turned off as they are required for the platform to operate securely.
As Bolaking involves real financial transactions in Malaysian Ringgit (MYR), payment data protection is a critical component of our Privacy Policy. Here is how we handle your financial information:
Bolaking follows a "minimum payment data" principle — meaning we only retain financial information that is strictly necessary to process transactions and meet compliance requirements. Specifically:
Financial transaction records — including deposit history, withdrawals, and betting transaction records — are retained for the period prescribed under Malaysian law (generally 7 years) for audit, AML compliance, and the resolution of any financial disputes that may arise. You may request these records through our support channels.
All deposit and withdrawal transactions at Bolaking are processed through payment channels that are verified and compliant with PCI-DSS (Payment Card Industry Data Security Standard) and the security standards set by Bank Negara Malaysia. Every transaction is protected by additional authentication layers to prevent unauthorised access.
The Bolaking platform is strictly for users aged 18 and above. We do not knowingly collect, store or process personal data of individuals under the age of 18. Should we discover that data belonging to a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account.
If you believe a minor has registered for or used the Bolaking platform, please notify us immediately by emailing support@bolaking.best with the subject line "Minor Complaint". We will investigate and take prompt action.
In the course of platform operations, certain members' personal data may be processed or stored on servers located outside Malaysia — for example, in connection with licensed casino game providers operating in other jurisdictions, or cloud infrastructure used for disaster recovery purposes.
Bolaking ensures that any cross-border data transfers occur only to countries or entities that provide a level of data protection equivalent to or greater than that required under Malaysian law. Strict data processing agreements are in place with all international providers who receive Bolaking member data, ensuring your data is protected to a consistent standard regardless of where it is physically processed.
Bolaking does not retain personal data longer than necessary. Below is a general guide to retention periods by data type:
Once the retention period expires, the relevant personal data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.
As a Bolaking member and data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:
Requesting a copy of your personal data held on record by Bolaking, including information on how it is processed.
Request the correction of any inaccurate, incomplete, or outdated data we hold about you.
Request the deletion of your personal data in circumstances where we no longer have a legal obligation to retain it.
Objecting to the processing of your data for marketing purposes or certain other purposes based on legitimate interest.
Request a temporary restriction on the processing of your data while any dispute regarding data accuracy or the legal basis for processing is being resolved.
Receive the data you have provided to us in a machine-readable format for transfer to another platform where applicable.
To submit any request relating to the rights listed above, please contact us by email at support@bolaking.best with the subject line "Privacy Rights Request", and include your account number and proof of identity for verification purposes. We will process your request within 30 business days.
Important Exceptions: The right to erasure does not apply to data we are legally required to retain under Malaysian law — for example, financial records that must be kept for 7 years as required by the Companies Act and AML regulations. We will clearly inform you if your erasure request falls under one of these exceptions.
Bolaking reserves the right to amend this Privacy Policy from time to time in response to changes in legislation, technological developments, or how we operate our services. When material amendments are made, we will:
We encourage you to check this page periodically. Continued use of the Bolaking platform after any amendments take effect will be considered your acceptance of the updated Privacy Policy.
For any enquiries, concerns, or requests relating to this Privacy Policy or how Bolaking handles your personal data, our team is available to assist in Bahasa Melayu:
For formal requests relating to your personal data rights under Malaysia's PDPA, please send an email with the subject line "PDPA Privacy Rights Request", along with your account number and a copy of your identity document for verification. We are committed to responding within 30 business days of receiving a complete request.
This Privacy Policy should be read in conjunction with Terms & Conditions and Responsible Gaming Guide Bolaking. Together, these three documents form the entire agreement between you and our platform and reflect Bolaking's commitment to operating with full integrity and transparency.
All personal data processing activities at Bolaking are guided by the seven core data protection principles recognised under Malaysia's PDPA:
Bolaking builds trust through action, not words. Industry-grade encryption, zero data selling, and full control over your personal information — that is our commitment. Register today and enjoy a Malaysian betting platform that genuinely respects its members' privacy.