Last Updated: 1 January 2026

Privacy Policy Bomus138 —
Data Protection Malaysian Players

Your privacy is our priority. This document clearly explains how bomus138 collects, uses, stores, and protects your personal information. We are committed to keeping your data secure and handling it responsibly at all times.

SSL 256-bit Encryption
Full Data Encryption
No Sharing Without Consent

Six Pillars Data Protection Bomus138

We go beyond mere legal compliance — we go the extra mile to ensure your personal information remains secure at all times.

Industry-Grade Encryption

All data transmitted between your device and bomus138 servers is protected with 256-bit SSL encryption. This ensures that no third party can intercept or read your information while in transit.

Secure Data Storage

Your personal information is stored on secured servers with strict access controls. Only authorised personnel may access this data, and every access is logged for audit purposes.

User Access Controls

You have full control over your profile information. Through your account settings, you can update, correct, or request deletion of your personal data at any time.

No Data Sales

Bomus138 has never and will never sell your personal information to any third party for marketing or commercial purposes. Your data is used solely for the purposes stated in this Privacy Policy.

Breach Notification

In the event of any security breach affecting your data, bomus138 will notify you within the timeframe required by law and take immediate steps to minimize the impact.

Legal Compliance

The Bomus138 Privacy Policy is designed to fully comply with Malaysia's Personal Data Protection Act (PDPA) and international data protection standards applicable to online betting platforms.

01
Information We Collect

To deliver the best online betting service to you, bomus138 collects several categories of personal information. This data collection is done transparently, and we only gather information that is genuinely necessary to operate the platform safely and efficiently.

Information you provide directly:

  • Full name, date of birth, and MyKad or passport number upon account registration.
  • Email address and mobile number for communication and verification purposes.
  • Current residential address for KYC and regulatory compliance purposes.
  • Bank account or digital wallet details for processing deposits and withdrawals.
  • Supporting documents submitted during the identity verification (KYC) process, such as MyKad photos, utility bills, or bank statements.

Information collected automatically:

  • IP address, browser type, device operating system, and other technical information when you access the platform.
  • Gaming activity data, including bets placed, games played, session duration, and transaction history.
  • Country or region-level location data based on IP address for geographic compliance purposes.
  • Cookie and session token information to ensure a smooth user experience.
Purpose Limitation

All information collected by bomus138 has a clear and legitimate purpose. We do not collect data unrelated to the platform's operations or beyond what is required by applicable regulations.

02
How We Use Your Information

The information we collect is used for the following purposes, all within the scope of Bomus138's legitimate interests as a licensed wagering platform or based on your consent:

Purpose of Use Legal Basis Retention Period
Identity verification & KYC Legal obligation 5 years after account closure
Transaction processing Contract performance 7 years (tax requirements)
Fraud prevention & AML Legitimate interests & legal obligations 10 years
Customer Support Contract performance 3 years
Marketing communications Your consent Until you unsubscribe
Platform analytics & improvement Legitimate interests 2 years (data collected)

We use your gaming activity information to identify betting patterns that may indicate problem gambling risk, and where necessary, to reach out to you with appropriate support resources. This is part of our commitment to responsible gaming.

You Can Unsubscribe

For marketing communications, you may unsubscribe at any time via the unsubscribe link in any email we send, or by contacting our customer support directly.

03
Sharing Information with Third Parties

Bomus138 does not sell, rent, or trade your personal information to any third party for their own commercial purposes. However, there are certain situations where we may need to share your information with carefully selected parties:

  • Payment service providers: DuitNow, FPX, TNG eWallet, GrabPay, Boost, and partner banks require certain information to securely process your financial transactions.
  • Game software providers: Our casino and sports game providers may receive limited game data necessary to operate the games properly.
  • Regulatory authority: We comply with all lawful requests from regulatory bodies, tax authorities, and law enforcement agencies when required by law.
  • Identity verification services: Trusted third-party KYC service providers assist us in verifying player identities to meet AML requirements.
  • Analytics providers: Aggregated and anonymised data is used to understand platform usage patterns and improve our services.

All third parties working with us are bound by strict confidentiality agreements and are required to protect your data to the same standards we uphold.

Business Transfer

If bomus138 is involved in a merger, acquisition, or asset sale, user information may be transferred as part of those business assets. You will be notified in advance before your information becomes subject to a different privacy policy.

04
Cookies & Tracking Technologies

Bomus138 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website.

Types of cookies we use:

  • Essential Cookies: Required for core platform functionality such as login verification and session security. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collecting information on how you use the platform to help us identify areas for improvement.
  • Functionality Cookies: Saving your preferences such as language, time zone, and display settings to provide a more personalised experience.
  • Analytics Cookies: Helping us understand platform traffic and usage patterns in aggregate, anonymised form.
Cookie Management

You can manage your cookie settings through your internet browser. Most browsers allow you to view, manage, and delete cookies via privacy settings. Please note that disabling certain cookies may affect the functionality of parts of our platform.

05
Data Storage & Security

Your data security is our absolute priority. Bomus138 implements multiple layers of technical and organisational safeguards to protect your personal information from unauthorised access, disclosure, alteration, or destruction.

Our technical security measures include:

  • 256-bit SSL/TLS encryption for all data communications between the platform and your device.
  • Encryption of sensitive data in databases using industry-grade encryption algorithms.
  • Multi-layered firewalls and intrusion detection systems (IDS) that monitor network traffic 24/7.
  • Two-factor authentication (2FA) for user accounts and internal staff access.
  • Regular security audits and penetration testing by independent experts.
  • Automated data backup systems and redundant storage to prevent data loss.

Your data is stored in certified data centres with high physical and digital security standards. Physical access to these data centres is strictly restricted and monitored at all times.

Incident Response

Bomus138 has a comprehensive incident response plan. In the event of any security incident, our team will respond within 72 hours and notify affected parties in accordance with applicable legal requirements.

06
Your Rights Regarding Personal Data

As a data subject, you have certain rights regarding the personal information we hold about you. bomus138 fully respects these rights and provides easy channels for you to exercise them.

Right of Access

You have the right to know what personal data we hold about you and to obtain a copy of it.

Right to Rectification

You can request that we correct any inaccurate or incomplete information we hold about you.

Right to Erasure

Under certain circumstances, you can request that we delete your personal data from our systems.

Right to Restriction of Processing

You can request that we restrict how we process your data in certain circumstances provided for by law.

Right to Data Portability

You can request that we provide your data in a machine-readable format for transfer to another provider.

Right to Object

You can object to the processing of your data for direct marketing purposes or certain legitimate interests.

How to Exercise Your Rights

To exercise any of the above rights, please contact our Data Protection team via Live Chat on the platform or through our official email. We will process your request within 30 business days. For complex cases, this period may be extended up to 60 days with prior notice.

07
Children's Data Protection

Bomus138 is an online betting platform strictly restricted to individuals aged 18 and above. We do not knowingly collect personal information from children or individuals below the legal age for gambling.

If we find that we have inadvertently collected personal information from someone under the age of 18, we will take immediate steps to:

  • Deleting all account-related information from our systems.
  • Closing the account immediately.
  • Returning any remaining account balance where applicable, in accordance with established procedures.
  • Reporting the incident to the relevant authorities where required by law.
Report an Underage Account

If you believe someone under the age of 18 has registered an account on Bomus138, please contact our customer support team immediately. We will investigate and take appropriate action within 24 hours.

08
Cross-Border Data Transfers

As an online betting platform operating globally with servers distributed across multiple locations, bomus138 may need to transfer your personal data across national borders. Any such transfers are carried out with a level of protection equivalent to that provided under Malaysian law.

The safeguards we implement for international data transfers include:

  • Use of approved Standard Contractual Clauses for transfers to countries without equivalent data protection standards.
  • Data transfer impact assessments prior to any new transfer being carried out.
  • Binding data processing agreements with all data recipients outside Malaysia.
  • Use of ISO 27001-certified data centres for offshore data storage.
09
Changes to This Privacy Policy

Bomus138 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or new platform features. We will provide adequate notice of any material changes.

When we make changes to this Privacy Policy, we will:

  • Updating the "Last Updated" date shown at the top of this page.
  • Sending email notifications to all registered members for material changes.
  • Displaying a clear notice on the platform the first time you log in after the changes take effect.
  • Maintaining an archive of previous versions of the Privacy Policy for your reference.

Your continued use of the Bomus138 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

10
Contact Our Data Protection Officer

If you have any questions, concerns, or complaints about how bomus138 handles your personal information, we encourage you to contact our Data Protection team directly.

Our team is ready to assist you with:

  • Inquiries regarding personal information we hold about you.
  • Requests to access, correct, or delete your personal data.
  • Complaints regarding privacy violations or improper use of data.
  • Clarification on any part of this Privacy Policy that is unclear.
How to Contact Us

Reach the Bomus138 customer support team via in-platform Live Chat, available 24 hours a day, 7 days a week. For privacy and data protection enquiries specifically, you can also contact us by official email: [email protected]

We are committed to responding to all privacy-related enquiries within 3 working days and resolve more complex requests within 30 business days.

🔒 Your Data is Safe with Us

Ready to Play with Secure?
Register & Enjoy Bonuses 100% Welcome

Your privacy is fully protected. Register a bomus138 account today and enjoy a safe, fair, and enjoyable online wagering experience alongside thousands of players in Malaysia.

Your data is encrypted Secure & trusted KYC Licensed Malaysia platform
Bahasa Melayu