Privacy Policy

Introduction

This Privacy Policy (the "Policy") issued by bo55 (referred to herein as "bo55", "we", "us", or "our") and applies to all personal data collected, processed, stored, or otherwise handled in connection with the operation of the bo55 platform at https://bo55.cam (the "Platform"), including any associated mobile applications, communications, and support channels.

bo55 is committed to processing personal data in a lawful, fair, and transparent manner. This Policy explains what personal information we collect from you when you access the Platform, create an account, place wagers, make deposits or withdrawals, or contact our support team — and how that information is used, protected, and retained.

By registering an account with bo55 or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you should discontinue use of the Platform and close your account.

Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, date of birth, IP address, payment information, and account activity records.
• "Processing" — Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — The entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, bo55 is the Data Controller in respect of Member data collected through the Platform.
• "Data Processor" — Any third party engaged by bo55 to process Personal Data on our behalf, such as payment processors, cloud hosting providers, or analytics platforms.
• "Member" — Any individual who has registered an account on the bo55 Platform.
• "Consent" — Freely given, specific, informed, and unambiguous agreement by the data subject to the processing of their Personal Data for a stated purpose.
• "Cookies" — Small text files placed on your device by the Platform to facilitate session management, preference storage, and analytical measurement.
• "KYC" — Know Your Customer, the identity verification process required before certain account activities (particularly withdrawals) may be processed.

Personal Data We Collect

bo55 collects personal data in several categories, depending on the nature of your interaction with the Platform. The following table sets out the categories of data we process:

How We Collect Personal Data

bo55 collects personal data through the following channels and mechanisms:

4.1 Direct Collection

You provide personal data directly to bo55 when you: register an account; complete the KYC verification process; make a deposit or submit a withdrawal request; contact our support team via live chat, email, or WhatsApp; participate in promotional campaigns or surveys; or update your account preferences.

4.2 Automated Collection

When you access the Platform, technical data — including your IP address, device identifiers, browser type, and session data — is collected automatically through server logs, cookies, and similar tracking technologies. This data is collected regardless of whether you hold a registered account.

4.3 Third-Party Sources

bo55 may receive personal data about you from authorised third-party sources in limited circumstances, including:

• Payment processors (Maybank, CIMB, Public Bank, DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost) who share transaction confirmation data with us for the purpose of crediting your account;
• Identity verification and KYC service providers engaged to assist with document validation;
• Fraud prevention and anti-money laundering (AML) screening databases, where required by our compliance obligations.

Purposes of Processing

bo55 processes your personal data for the following purposes:

1. Account Management: Creating, maintaining, and administering your bo55 Member account, including password reset, username management, and account history.
2. Transaction Processing: Processing deposits via DuitNow, FPX, Maybank, CIMB, Touch 'n Go eWallet, GrabPay, and Boost; settling withdrawals; and maintaining accurate financial records of all account activity.
3. Identity Verification (KYC): Verifying your identity and age (21+ minimum) in compliance with applicable anti-money laundering obligations and responsible gambling requirements.
4. Platform Operation: Delivering sports betting markets (including Liga Super Malaysia, EPL, UFC, and esports), live casino games, slot titles, and all other services available on the Platform.
5. Fraud Prevention and Security: Detecting and preventing fraudulent transactions, account takeovers, money laundering, bonus abuse, and other prohibited conduct.
6. Customer Support: Responding to support enquiries submitted via live chat, email ([email protected]), or WhatsApp, in English, Bahasa Melayu, or Mandarin.
7. Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to Members who have opted in to receive such communications. You may withdraw consent at any time.
8. Regulatory Compliance: Meeting our obligations under applicable gaming regulations, AML legislation, and data protection law, including record-keeping and reporting requirements.
9. Analytics and Platform Improvement: Analysing aggregated usage data to improve the Platform's features, performance, and user experience — in a manner that does not individually identify any Member.

Legal Basis for Processing

bo55 processes your personal data one or more of the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the Terms and Conditions you accepted when registering your account — including account administration, transaction processing, and KYC verification.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, responsible gambling requirements, and applicable gaming regulations.
• Legitimate Interests: Processing necessary for bo55's legitimate business interests, including fraud prevention, platform security monitoring, and internal analytics — where these interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in respect of marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Disclosure of Personal Data to Third Parties

bo55 does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties, solely for the purposes set out in this Policy:

7.1 Payment Service Providers

To process your deposits and withdrawals, we share relevant financial and identity data with authorised payment processors, including but not limited to: Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow (via Bank Negara Malaysia's payment infrastructure), FPX, Touch 'n Go eWallet, GrabPay, and Boost. Data shared is limited to what is strictly necessary to authenticate and complete the transaction.

7.2 Identity Verification Providers

We engage third-party KYC and identity verification service providers to assist with the validation of documents submitted during the verification process. These providers operate under strict data processing agreements and are prohibited from using your data for any purpose other than the verification service.

7.3 Technology and Infrastructure Providers

bo55 utilises cloud hosting, content delivery, and security infrastructure providers who may process personal data incidental to the provision of their technical services. All such providers are engaged under appropriate data processing agreements.

7.4 Regulatory and Law Enforcement Bodies

bo55 may be required to disclose personal data to regulatory authorities, law enforcement agencies, or courts in response to lawful requests, legal process, or our obligations under applicable gaming and AML regulations. We will notify you of such disclosures where we are legally permitted to do so.

7.5 Business Transfers

In the event of a merger, acquisition, or sale of bo55's business or assets, personal data held by us may be transferred to the successor entity, subject to the acquirer maintaining equivalent data protection standards. We will notify registered Members of any such transfer prior to its completion.

International Data Transfers

bo55 operates internationally, and certain personal data may be transferred to, stored in, or processed in jurisdictions outside Malaysia. Where such transfers occur, bo55 takes appropriate measures to ensure that your personal data remains protected to a standard equivalent to that applicable in Malaysia.

These measures may include: contractual safeguards such as standard data protection clauses; transfers to jurisdictions recognised as providing adequate data protection; or reliance on the legitimate interests basis where the transfer is necessary for the performance of a contract with you.

Data Retention

bo55 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained throughout the period your account remains active, plus a minimum of five (5) years following account closure, to meet AML record-keeping requirements.
• Transaction Records: Financial transaction records (deposits, withdrawals, wagers) are retained for a minimum of seven (7) years in accordance with financial record-keeping obligations.
• KYC Documents: Identity documents submitted as part of KYC verification are retained for five (5) years following the completion of your last transaction or the closure of your account, whichever is later.
• Support Communications: Live chat transcripts and email correspondence are retained for two (2) years from the date of the communication, unless a specific matter requires longer retention.
• Marketing Data: Marketing preferences and opt-in records are retained for the duration of your account and for two (2) years following any opt-out, for audit purposes.
• Technical Logs: Server logs and access records are retained for up to twelve (12) months, after which they are securely deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted, destroyed, or anonymised in accordance with our data disposal procedures.

Cookies & Tracking Technologies

bo55 uses cookies and similar tracking technologies to operate the Platform, personalise your experience, and analyse usage patterns. This section explains the types of cookies we use and your choices regarding cookie use.

10.1 Types of Cookies Used

10.2 Managing Cookies

You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies will impair the functionality of the Platform, including your ability to log in and access your account. Disabling optional cookies will not affect your access to core Platform services.

Your Data Rights

Subject to applicable data protection law, you have the following rights in relation to your personal data held by bo55. You may exercise any of these rights by contacting our support team at [email protected]:

Security Measures

bo55 implements a comprehensive suite of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or destruction. These measures include, but are not limited to:

• Encryption: All data in transit between your device and bo55 servers is encrypted using TLS 1.3 with 256-bit encryption. Sensitive data at rest (including KYC documents and financial records) is stored using AES-256 encryption.
• Access Controls: Access to Member personal data within bo55's organisation is restricted on a strict need-to-know basis. Staff access is authenticated via multi-factor authentication and access logs are retained.
• Penetration Testing: bo55 conducts periodic security assessments and penetration tests to identify and remediate vulnerabilities in the Platform's infrastructure.
• Incident Response: bo55 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights, we will notify you and the relevant regulatory authority within the timeframes required by applicable law.
• Two-Factor Authentication (2FA): Members are strongly encouraged to enable 2FA on their accounts. This adds a second layer of authentication beyond your password, significantly reducing the risk of unauthorised account access.

While bo55 takes all reasonable precautions, no online platform is entirely immune from security threats. We encourage you to use a strong, unique password for your bo55 account and never share your credentials with any third party.

Children's Privacy

The bo55 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under 21 years of age. bo55 enforces age verification as part of the KYC process, and any account found to belong to an individual under 21 will be immediately suspended and all associated data securely deleted or returned.

If you believe that a person under the age of 21 has registered on the Platform or provided personal data to bo55, please contact us immediately at [email protected] so that we may take appropriate action.

Marketing Communications

Where you have provided your consent to receive marketing communications, bo55 may send you promotional emails, in-app notifications, or SMS messages relating to our products, bonuses, and services — including updates on Liga Super Malaysia odds, EPL betting promotions, and platform feature announcements.

You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email;
• Updating your communication preferences in your account settings;
• Contacting our support team at [email protected] with a request to opt out.

Opting out of marketing communications will not affect the delivery of transactional communications relating to your account (e.g., deposit confirmations, withdrawal notifications, security alerts, or KYC status updates), which are considered essential account communications and are not subject to opt-out.

Updates to This Privacy Policy

bo55 reserves the right to update or revise this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the scope of the Platform's services. The date of the most recent update is displayed at the top of this page.

Where changes are material — meaning they affect your rights or the way we process your personal data in a significant manner — we will provide advance notice to all registered Members via the email address associated with their account, no less than 14 days before the changes take effect.

Non-material updates (such as typographical corrections or clarifications that do not alter the substance of the Policy) may be made without advance notice. We encourage you to review this Policy periodically to remain informed of how your data is handled.

Your continued use of the Platform following the effective date of any update constitutes your acceptance of the revised Policy.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by bo55, please contact our Data Privacy team through the following channels:

• Live Chat: Available24 hours a day, 7 days a week via the bo55 Platform. Our support team operates in English, Bahasa Melayu, and Mandarin. Average response time: 3–5 minutes.
• Email: [email protected] — for data subject requests, please include "Privacy Request" in the subject line and provide your registered username to assist with identification. Allow up to 30 days for a full response.

For data access requests (Subject Access Requests), please provide: your full name as registered on your bo55 account; your registered email address; a description of the data you are requesting access to; and a copy of your identity document for verification purposes.