bolalion Privacy Policy – Your Data, Handled with Care

Introduction

This Privacy Policy describes how bolalion and its authorised service operations collect, use, store, and share personal information provided by individuals who access the bolalion website, create an account, use gaming and betting features, claim promotions, make MYR deposits and withdrawals, or contact customer support.

bolalion operates under an international gaming licensing framework and is committed to handling personal data in a manner consistent with recognised data-protection principles, including purpose limitation, data minimisation, storage limitation, integrity, and confidentiality.

Malaysian users are advised that bolalion operates under an international framework and does not claim to be regulated by any Malaysian domestic data protection authority. You are responsible for understanding the data rights and protections applicable to you under Malaysian law.

Definitions

"Personal data" means any information that identifies or can reasonably identify a living individual, including name, identification number, contact details, device identifiers, account activity, and financial records.

"Processing" includes any operation performed on personal data, such as collecting, recording, storing, accessing, altering, disclosing, transmitting, deleting, or destroying it. "Controller" refers to bolalion as the entity that determines the purposes and means of processing. "Data subject," "you," and "your" refer to the person whose personal data is processed. "Third party" means any person or organisation other than bolalion and the data subject.

Data We Collect

bolalion may collect the following categories of personal information, depending on how you use the platform:

We do not intentionally collect special-category data such as health information, racial or ethnic origin, religious beliefs, or political opinions unless you voluntarily provide it, for example, in a responsible gambling context, and we treat any such information with heightened care.

How We Collect Your Data

bolalion collects personal information through the following means:

• Account registration: information you supply when opening a bolalion account, including name, contact details, and date of birth.
• Know Your Customer checks: documents submitted during identity verification, address confirmation, or source-of-funds review.
• Payment processing: details exchanged when you deposit or withdraw MYR through e-wallets, DuitNow, FPX, or bank transfer.
• Platform use: activity automatically recorded when you navigate, bet, spin, or interact with the bolalion interface.
• Customer support: information you share during live chat, email, or other communications with the bolalion support team.
• Cookies and similar technologies: technical identifiers placed by bolalion or its service partners, described further under the Cookies section.
• Third-party verification providers: identity and fraud-check services that supplement the information you supply directly.

Legal Bases for Processing

bolalion processes personal data on one or more of the following grounds depending on the specific purpose:

• Contract performance: processing necessary to create, maintain, and close your bolalion account, including payment handling, bet settlement, and bonus administration.
• Legal obligation: processing required by applicable anti-money-laundering, counter-terrorism-financing, age verification, and gaming-compliance requirements.
• Legitimate interests: fraud detection, account security, responsible gambling monitoring, platform improvement, and analytics, where those interests are not overridden by your rights.
• Consent: where you have given specific, informed permission, for example, for optional marketing communications. Consent may be withdrawn at any time.

How We Use Your Data

Personal information collected by bolalion is used for the following purposes:

• Opening, verifying, operating, and closing bolalion accounts.
• Processing MYR deposits and withdrawals through approved Malaysian payment methods.
• Settling bets and resolving disputes on sports markets, live casino tables, slots, and other games.
• Administering bonuses, loyalty points, and promotional offers in accordance with the applicable terms.
• Conducting age verification and Know Your Customer checks as required by our operating framework.
• Detecting, preventing, and investigating fraud, money laundering, collusion, and account abuse.
• Monitoring for responsible gambling patterns and applying account controls where appropriate.
• Providing customer support through live chat and email.
• Improving platform functionality, interface design, and game performance.
• Complying with applicable legal, regulatory, or licensing requirements.
• Sending service communications, including account notices, payment confirmations, and security alerts.
• Sending marketing communications where you have provided consent — you may unsubscribe at any time.

Data Sharing and Disclosure

bolalion does not sell your personal data. We may share information with selected third parties only where necessary and under appropriate agreements:

• Payment service providers: Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency processing services, to complete transactions you have authorised.
• Identity and fraud verification services: accredited third-party providers that help bolalion complete KYC checks, age verification, and fraud screening.
• Game content providers: licensed studio partners who supply game software and, in the case of live dealer games, streamed content. These providers may access limited session data to operate their games.
• Licensing and compliance authorities: bodies to which bolalion is required to report under its international gaming operating framework.
• Legal and law enforcement: where required or permitted by applicable law, in response to a valid legal order, or to protect against serious harm.
• Professional advisers: legal counsel, accountants, and auditors who are bound by professional confidentiality obligations.
• Business transfers: in the event of a merger, acquisition, or transfer of business operations, personal data may be included among the transferred assets, subject to equivalent privacy commitments.

All third-party data processors engaged by bolalion are required to handle personal information only for the specified purpose and to maintain adequate security measures.

Cookies and Tracking Technologies

bolalion uses cookies and similar client-side technologies to support platform operation. The main categories are:

• Strictly necessary cookies: required for account sessions, authentication, and core platform functionality. These cannot be disabled without affecting access.
• Functional cookies: remember your preferences such as display settings and language selection.
• Analytics cookies: collect aggregated information about navigation patterns to help us improve the bolalion interface. Data used for analytics is anonymised or pseudonymised where practicable.
• Security cookies: help detect irregular activity, protect against bot access, and support fraud-prevention systems.

You may control non-essential cookies through your browser settings. Disabling certain cookies may affect platform performance or remove personalised features. bolalion does not deploy third-party advertising trackers or behavioural profiling cookies for external commercial purposes.

Data Retention

bolalion retains personal data for as long as your account is active and for a reasonable period afterwards to meet legal, regulatory, and operational obligations. Specific retention periods may vary by data category:

• Account and transaction records: typically retained for a minimum of five years after account closure, in line with anti-money-laundering and gaming compliance requirements.
• Identity documents: retained for the duration of the account relationship and the compliance hold period applicable after closure.
• Customer support records: retained for the period reasonably necessary to address the matter and handle any subsequent complaint or legal claim.
• Marketing consent records: retained until consent is withdrawn and for a reasonable period thereafter as evidence of consent status.
• Technical logs: typically retained for a shorter operational period in line with fraud-prevention and security needs.

After the applicable retention period, personal data is securely deleted or irreversibly anonymised.

International Data Transfers

bolalion operates on a global infrastructure and may transfer personal data to servers or service providers located outside Malaysia. Where personal information is transferred internationally, bolalion takes steps to ensure that appropriate safeguards are in place, such as contractual protections that require overseas recipients to protect data to a standard materially equivalent to the commitments in this Policy.

Malaysian users should be aware that data protection laws differ between countries. By using bolalion, you acknowledge that your information may be processed outside Malaysia under the international framework described in this Policy.

Your Data Rights

Subject to applicable law and the limitations described below, you may exercise the following rights regarding your personal data held by bolalion:

• Access: request a summary of the personal information bolalion holds about you and how it is used.
• Correction: ask bolalion to correct inaccurate or incomplete information in your account record.
• Deletion: request erasure of personal data where it is no longer necessary for the purpose it was collected, subject to retention obligations.
• Restriction: ask bolalion to restrict further processing of your data in specified circumstances.
• Objection: object to processing carried out on the basis of legitimate interests.
• Portability: where technically feasible and legally applicable, receive your personal data in a structured, commonly used format.
• Withdraw consent: where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

bolalion may need to verify your identity before fulfilling a data request. Certain rights may be limited where retention is required by law, for fraud investigation, or where exercising the right would prejudice the rights of others. To submit a request, contact bolalion support through the live chat or by email.

Minors and Age Verification

bolalion is strictly for adults aged 21 and above. We do not knowingly collect personal information from individuals under 21. Age and identity verification is applied at registration and may be requested again during the lifecycle of an account.

If bolalion determines or has reasonable grounds to believe that personal data has been collected from a person under the minimum age, the account will be closed, bets placed will be voided, and deposited funds will be returned through the original payment method, subject to verification of ownership. Any bonus balance will be forfeited.

Security Measures

bolalion applies technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• TLS encryption for data in transit between your device and the bolalion platform.
• Encryption or strong hashing of stored credentials and sensitive account fields.
• Access controls limiting data visibility to staff with a legitimate operational need.
• Monitoring systems designed to detect irregular access patterns or potential breaches.
• Incident response procedures for identifying, containing, and notifying affected parties of significant data incidents.

No security measure is absolute. Players must also take reasonable steps to protect their own account by keeping login credentials private, enabling two-factor authentication where available, and reporting suspected unauthorised access promptly.

Third-Party Links and Services

The bolalion platform may reference third-party services, game providers, or payment operators. This Privacy Policy applies only to information processed directly by bolalion. Third parties maintain their own privacy practices, and bolalion is not responsible for how they handle personal data. Players should review the privacy notices of any third-party service they interact with.

Changes to This Privacy Policy

bolalion may revise this Privacy Policy to reflect changes in our data practices, legal obligations, or operational requirements. Material updates will be published on this page with a revised effective date. Where the change significantly affects how we use your personal data, we will make reasonable efforts to notify you directly through your registered contact information or a prominent platform notice.

Continued use of bolalion after an updated Policy becomes effective constitutes your acceptance of the revised terms. We recommend reviewing this page periodically.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to report a privacy concern, please contact the bolalion support team through the live chat on the platform, available 24 hours a day, seven days a week. Support hours are aligned to Malaysia Time (MYT, UTC+8).

Email contact is available at [email protected]. This address is shown as plain text and is not a clickable link. Please do not include your password, one-time verification code, or complete payment-card details in any message to support.