Rujukan Laman

How bonas888 Handles Your Personal Data

At bonas888, we take seriously how your personal data is collected, stored and used when you hold an account with us.

Data collected only for account purposesYour rights to access and correct your dataTouch 'n Go, GrabPay, Boost dan FPX transaction records protectedNo data sold to third partiesContact us anytime to request changes
bonas888 How bonas888 Handles Your Personal Data
PRIVACY CONTACT PATHS

How to Reach Us About Your Data

Team online

Email Our Data Team

Send a written request to our dedicated privacy address to ask for a copy of your data, correct inaccuracies, or request deletion. We respond within five working days of receiving your message.

Live Chat Support

Our support team is available around the clock via live chat. For data-specific queries, they will escalate your request to the privacy team and confirm a reference number within the same session.

Written Correspondence

If you prefer to submit a formal written request by post, our registered address is listed at the foot of this policy. Include your account email and the specific right you wish to exercise.

DATA HANDLING PRACTICES

How We Protect and Manage Your Account Data

bonas888 applies layered controls at every stage of data handling — from the moment you submit your registration details through to how long we retain your payment history after account closure.

Encryption at Rest and in Transit

All personal data stored on our servers is encrypted using current-standard protocols. Data transmitted between your browser or app and our servers travels over TLS-secured connections, so your details are protected in transit.

Cookie Policy

We use session cookies to keep you logged in and analytics cookies to understand how pages are used. You can manage cookie preferences through your browser settings. Disabling analytics cookies does not affect your account access.

Account Security Controls

Two-step verification is available on your account. We recommend enabling it via your account settings page. Any unrecognised login attempt triggers an automated alert sent to your registered email address.

Data Retention Schedule

We keep your account data for as long as your account remains active and for the period required under Malaysian financial and anti-money-laundering regulations after closure. Data no longer required is securely deleted from our systems.

Your Right to Access and Correct

Under the PDPA, you can request a copy of the personal data we hold about you at any time. If any detail is incorrect — such as your registered name or contact number — you may ask us to correct it promptly.

Third-Party Data Processors

We share data only with processors essential to running your account — payment gateway operators for Touch 'n Go, GrabPay, Boost dan FPX, and identity-verification services. Each processor is bound by a data-processing agreement.

Your Privacy Questions Answered

Below are the questions we receive most often about how bonas888 handles your personal data. If your question is not covered here, reach out via live chat or email and our privacy team will respond within five working days.

We collect your full name, date of birth, email address, contact number and the payment method identifiers associated with your deposits — including references from Touch 'n Go, GrabPay, Boost dan FPX and FPX bank transfers. We also log device type and login timestamps for security purposes.

No. We do not sell or share your personal data with third-party marketers. Data is shared only with payment processors and verification providers strictly necessary to operate your account, and each of those partners is under a binding data-processing agreement.

Email our privacy team from your registered address or submit the request via live chat. Quote your account username and the type of data you want. We will send a structured data extract to your verified email address within five working days.

Yes, subject to our legal retention obligations under Malaysian law. Once you request deletion, we remove data that is no longer legally required to retain. Any data we must keep — such as transaction records under AML regulations — will be noted in our response to you.

We retain account and transaction data for the period mandated by Malaysian financial regulations after closure. Once that retention period ends, your data is permanently deleted from our systems. We will confirm the applicable period in writing upon account closure.

We use session cookies required for login, and optional analytics cookies that help us improve page performance. You can block or delete cookies through your browser settings at any time. Blocking analytics cookies does not prevent you from accessing your account or making deposits.

Contact our privacy team via email or live chat in the first instance. If you are not satisfied with our response, you have the right to raise a complaint with the Department of Personal Data Protection (PDPD) in Malaysia, which oversees PDPA compliance.