Privacy Policy bomus138
– Protection of Your Personal Data

This Privacy Policy describes the data protection practices of bomus138 ("we", "our platform") regarding personal information collected from users ("you", "members") who access or use the services at bomus138.net and related mobile applications.

We take a serious and proactive approach to protecting your personal data, in line with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards. Our goal is to ensure you always know what we do with your information, why we need it, and how we protect it.

This Privacy Policy should be read together with Terms and Conditions us. In the event of any conflict between the two documents regarding data privacy, this Privacy Policy shall take precedence.

Bomus138 collects your personal data through several means depending on how you interact with the platform. Below are the categories of data we collect and their sources:

We only collect data that is genuinely necessary for the stated purposes. Data collected automatically, such as technical information and platform activity, is used solely for service improvement and fraud detection.

The personal data we collect is used for legitimate and transparent purposes. bomus138 does not use your data for any purpose beyond what is stated here without first obtaining your additional consent.

• Identity verification and KYC — verifying that you meet membership eligibility requirements and preventing identity fraud
• Transaction processing — facilitating deposits, withdrawals, and all financial transactions accurately and securely
• Account management — creating, maintaining, and protecting your account on the bomus138 platform
• Customer support — handling your inquiries, complaints, and support requests effectively
• Service Communications — sending important notifications related to your account, transactions, and security updates
• Fraud detection and prevention — monitoring suspicious activity to protect you and our platform
• Legal compliance — meeting legal obligations including anti-money laundering (AML) requirements
• Platform improvements — analysing usage patterns to improve the overall user experience

Bomus138 does not sell, rent, or disclose your personal data to third parties for their commercial or marketing purposes. However, there are limited situations where we need to share your information to keep our platform functioning properly:

• Payment providers — transaction information is shared with payment service providers such as banks and digital wallet operators to process your deposits and withdrawals
• Technology service providers — companies that assist us in operating the platform, server infrastructure, and security systems are bound by strict confidentiality agreements
• Legal authorities — we will disclose the required information when ordered to do so by a valid court order, regulatory body, or law enforcement agency
• Fraud prevention — in cases where it is necessary to prevent or investigate fraud, money laundering, or other financial crimes

All third parties that receive your data from bomus138 are required to handle that information in accordance with data protection standards equivalent to our Privacy Policy. We do not permit any third party to use your data for their own purposes without your explicit consent.

We implement comprehensive technical and organisational security measures to protect your personal data from unauthorised access, modification, disclosure, or destruction. Our security systems include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers
• At-rest encryption for all sensitive information stored in our databases
• Intrusion detection system (IDS) and intrusion prevention system (IPS) operating 24 hours a day
• Strict role-based access control — only authorised staff who require access to carry out their duties are granted permission
• Regular independent security audits to identify and address potential vulnerabilities
• Two-factor authentication (2FA) for admin access and recommended for all member accounts
• Automatically encrypted data backups to ensure service continuity

Bomus138 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use three main categories of cookies:

• Essential Cookies — required for core platform functions such as session login, account security, and language preferences. These cookies cannot be disabled as the platform will not function properly without them
• Performance & Analytics Cookies — helping us understand how you interact with the platform so we can improve the user experience. Information collected is aggregated and does not personally identify individuals
• Preference Cookies — saving your personal settings such as display theme, game preferences, and other preferences for a more personalised experience

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect platform functionality.

As a bomus138 member residing in Malaysia, you have the following rights regarding your personal data under PDPA 2010 and our platform policy:

• Right of Access — you have the right to obtain a copy of the personal data we hold about you
• Right to Rectification — you have the right to request correction of any inaccurate or outdated data
• Right to Erasure — you may request deletion of your personal data, subject to record-keeping requirements prescribed by law
• Right to Restrict Processing — in certain circumstances, you have the right to request that we restrict how we use your data
• Right to Object — you have the right to object to the processing of your data for direct marketing purposes
• Right to Data Portability — you have the right to receive your data in a machine-readable format for transfer to another provider

Bomus138 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following are our data retention guidelines:

• Active account data — retained for the duration your account is active and for any additional period required by law following account closure
• Financial transaction records — retained for a minimum of 7 years from the transaction date in line with Malaysia's financial regulatory requirements
• KYC records and identity verification — retained for a minimum of 5 years after account closure in accordance with AML requirements
• Support communication logs — retained for 2 years from the date of the last communication
• Analytics and technical data — deleted or anonymised after 13 months

Once the retention period expires, your data will be permanently deleted or anonymised so that it can no longer be linked to you. The deletion process follows secure procedures that ensure data cannot be recovered.

Bomus138 services are not intended for individuals under the age of 18. We do not knowingly collect any personal data from children or minors. We have strict age verification procedures as part of our account registration process.

Bomus138 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. The "Last Updated" date at the top of this document indicates when the latest version took effect.

When we make significant changes to this Privacy Policy, we will:

• Sending email notifications to all registered members
• Displaying a clear notice on the main section of the platform for a minimum of 14 days
• In the case of very significant changes, we may request your renewed consent before the changes take effect

Continued use of the bomus138 platform after the effective date of any changes constitutes acceptance of the updated Privacy Policy. We recommend bookmarking this page and reviewing it periodically.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us through the following channels:

• Live Chat: Available 24/7 via the chat icon on our bomus138 platform or app — the fastest way to get an immediate response
• Data Protection Email: support@bomus138.net — include "Privacy Inquiry" in the subject line for priority handling
• FAQ: Visit FAQ page us for answers to frequently asked questions about privacy and account security