Data Protection Documents

Bonu138 Privacy Policy – How We Protect Your Personal Information

Your privacy is our priority. This document clearly explains the data we collect, why it is collected, and how it is protected at all times.

Updated: 1 January 2026
Applicable in Malaysia
256-bit SSL Protected
256-bit SSL Encryption

All data transmitted between your device and bonu138 servers is protected by bank-level encryption.

Data Not Sold

Bonu138 never sells or rents your personal information to any third parties for marketing purposes.

Malaysian PDPA Compliance

Bonu138 data management fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA).

Full Control Is Yours

You have the right to access, amend, or request deletion of your personal data from bonu138 records at any time.

Latest version – 1 January 2026

This Privacy Policy ("Policy") is published by bonu138 ("Platform", "We") and describes how we collect, use, store, and protect your personal information when you use the bonu138.pro platform or the bonu138 mobile app. By registering or using this platform, you agree to the terms of this Privacy Policy.

We encourage you to read this document in full. If any section is unclear, contact the bonu138 support team for further clarification.

1 Introduction and Scope of This Policy

Bonu138 takes privacy protection very seriously. As an online entertainment platform operating for Malaysian users, we understand that your trust is the most valuable asset we hold. Without your trust, no platform can survive long-term.

This Policy applies to all users who access the bonu138.pro website, use the bonu138 mobile app, or interact with us through any official channel including live support and email. It covers all data processing activities carried out by bonu138 in our capacity as data controller.

We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable data protection legislation. In the event of any conflict between this Policy and legal requirements, the legal requirements will take precedence.

2 Types of Personal Data We Collect

Bonu138 only collects data that is genuinely necessary to provide services, fulfill legal obligations, and enhance user experience. Below are the categories of data we collect:

Data Category Example Information Primary Purpose
Identity Full name, MyKad/passport number, date of birth KYC verification & account registration
Contact Phone number, email address Account communications & notifications
Financial Bank account details, transaction history Deposit & withdrawal processing
Technical IP address, device type, browser, access logs Security & fraud prevention
Games Betting history, game preferences, active sessions Service improvement & responsible gaming
bonu138 never collects sensitive data such as your medical information, religious beliefs, or political views.

3 How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. bonu138 uses your information to:

  • Processing account registration and verifying your identity through mandatory KYC procedures.
  • Processing deposits and withdrawals securely and maintaining accurate transaction records.
  • Providing effective customer support services and helping resolve any account issues.
  • Sending important notifications related to your account, promotions, and platform updates – with your permission.
  • Detecting and preventing fraud, money laundering, and other harmful activities.
  • Complying with legal reporting obligations to regulatory authorities when required.
  • Analyzing usage patterns to improve platform features and overall user experience.
  • Supporting responsible gaming programs by monitoring concerning betting patterns.
Your data is never used for advertising unrelated to bonu138 or for the benefit of third parties without your explicit consent.

4 Data Sharing with Third Parties

Bonu138 does not sell, rent, or transfer your personal data to third parties for marketing purposes. However, there are certain situations where data sharing is necessary and legally permitted:

  • Payment service providers: Required transaction information is shared with payment processors such as FPX, DuitNow, and e-wallet networks integrated with the bonu138 platform to facilitate secure financial transactions.
  • Game software providers: Minimal, anonymized game session data may be shared with third-party game providers to ensure game integrity.
  • Legal authorities: We are required to disclose certain information to authorities when requested by a court order, criminal investigation, or valid reporting obligation.
  • Anti-fraud services: Technical information such as IP addresses and login patterns may be checked against approved third-party fraud detection systems.
All third parties receiving your data are bound by strict confidentiality agreements and may only use that data for the stated purposes.

5 Security Measures We Take

Bonu138 invests seriously in data security infrastructure. The protections we implement include:

  • 256-bit SSL encryption: All communications between your device and bonu138 servers are protected with the same bank-grade encryption used by leading financial institutions.
  • Multi-layer security: bonu138 data servers are protected by firewalls, intrusion detection systems, and regular vulnerability scans.
  • Internal access controls: Only authorized personnel with a legitimate work requirement may access member personal data.
  • Two-factor authentication (2FA): bonu138 internal systems use multi-factor authentication for all staff access to member databases.
  • Regular security audits: Our systems are regularly audited by independent parties to ensure security standards remain up to date with the latest threats.
While no system can guarantee absolute 100% security, bonu138 takes all reasonable and industry-standard measures to protect your data.

6 Cookies and Tracking Technologies

Bonu138 uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions properly. Types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled.
  • Performance cookies: Collecting anonymous data about how visitors use the platform to help us identify and resolve technical issues.
  • Functional cookies: Storing your preferences such as language, currency, and display settings so you don't have to set them again each time.
  • Analytics cookies: Helping us understand usage patterns in aggregate and anonymously to improve platform design and content.

You can manage cookie settings through your internet browser. However, disabling essential cookies may affect the functionality of the bonu138 platform.

7 Your Rights as a Data Subject

Under Malaysia's PDPA and the bonu138 Privacy Policy, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of all personal data we hold about you.

Right to Rectification

You may request correction of any inaccurate or incomplete data.

Right to Erasure

In certain circumstances, you may request that your data be deleted from our records.

Right to Object

You may object to the processing of your data for specific purposes, including direct marketing.

Right to Data Portability

You may request your data in a machine-readable format for transfer to another platform.

Right to Restriction

You may ask us to restrict data processing in certain situations while a dispute is being resolved.

To exercise any of the above rights, contact the bonu138 support team through official support channels. We will process your request within 30 working days.

8 Data Retention Period

Bonu138 only retains your personal data for as long as it is needed for the original purpose of collection or as required by law:

  • Active account data: Retained for the duration your account is active on bonu138 and for a defined period after account closure for audit purposes.
  • Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian legal requirements for financial record-keeping.
  • Security logs: Technical log data is retained for 12 months for security investigation and fraud prevention purposes.
  • Support communication data: Customer support session records are kept for 2 years to ensure service continuity.

When data is no longer needed and there is no legal obligation to retain it, bonu138 will securely delete or anonymize it.

9 Changes to This Privacy Policy

Bonu138 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or improvements to our services.

When significant changes are made, we will notify you via an in-platform notification or your registered email. The "updated" date at the top of this document will always reflect the latest version.

Continued use of the bonu138 platform after any changes to this Privacy Policy constitutes your acceptance of the amended terms.

10 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the bonu138 team is ready to help:

Privacy Email
Live Support
Available 24/7 via live chat on the bonu138 platform
Response Time
Within 3 business days for privacy inquiries

Your Privacy, Our Priority

Bonu138 doesn't just comply with the law – we exceed minimum requirements to ensure your data remains secure at all times.

Segmented Database

Financial data, identity data, and game data are stored in separate databases with distinct access controls to reduce the risk of large-scale data breaches.

Data Anonymization

Data used for analytics and platform improvement is anonymized beforehand so it cannot be traced back to your actual identity.

Malaysian PDPA Compliance

Bonu138 fully complies with the Personal Data Protection Act 2010 and all data protection legislation applicable to our operations in Malaysia.

Your Data Is Safe with bonu138

Join over 500,000 Malaysian members who have trusted bonu138 with their entertainment experience – a platform that puts your privacy and security first.

Bahasa Melayu