At Bolahiu, your privacy is our priority. This policy clearly explains what data we collect, why we collect it, how it is used, and your rights as a data subject under Personal Data Protection Act 2010 (PDPA) Malaysia. We believe transparency is the foundation of trust.
Six core principles that shape how Bolahiu handles every member's personal data.
We only collect data that is genuinely necessary to operate our services. No excess data is collected simply because it is available — if we do not need a piece of information to serve you better, we will not ask for it.
Your personal data has never been and will never be sold, rented, or shared with any third party for marketing purposes. Information you provide to Bolahiu is used solely for the operation of this platform — not as a business commodity.
All data transmitted between your device and Bolahiu's servers is protected by 256-bit SSL encryption — the same standard used by Maybank2u and CIMB Clicks. Data stored on our servers is also encrypted to prevent unauthorised access even in the event of a physical breach.
Every aspect of how Bolahiu handles member personal data complies with Malaysia's Personal Data Protection Act 2010 (PDPA). This includes the seven data protection principles set out in the Act — from lawful collection through to the secure deletion of data when it is no longer needed.
As a Bolahiu member, you have the full right to access your personal data, request corrections to any inaccurate information, and in certain circumstances request that your data be deleted from our systems. All such requests can be submitted by emailing our team.
You have full control over the marketing communications you receive from Bolahiu. Every promotional email includes a working unsubscribe link that takes effect immediately. You can also manage your communication preferences directly from your account settings without needing to contact support.
We collect data to operate our services, process transactions, and comply with applicable laws. We does not sell your data. You have the right to access, correct, and delete your data. All data is protected with 256-bit SSL encryption. For any questions, email us at support@bolahiu.asia.
This Privacy Policy ("Policy") describes how Bolahiu ("we", "our platform") collects, uses, stores, discloses and protects your personal information when you use our website and services at bolahiu.asia.
This policy applies to all users of the Bolahiu platform, including website visitors, registered members, and former members whose accounts still retain transaction history. It should be read together with the separate Bolahiu Terms & Conditions.
By registering as a Bolahiu member or continuing to use the platform after notice of changes to this policy, you are deemed to have read and agreed to this Privacy Policy. If you do not agree, please stop using the platform and contact us to discuss your data deletion options.
Legal Basis: Bolahiu's collection and processing of personal data is governed by Malaysia's Personal Data Protection Act 2010 (PDPA). We process your data on the basis of your consent, contract performance (membership agreement), legal obligations, and legitimate interests that do not override your fundamental rights.
The following are the categories of personal data that Bolahiu may collect from you during registration and your use of the platform:
Identity & Contact Data
Financial & Transaction Data
Technical & Usage Data
Sensitive Data: Bolahiu does not collect sensitive data such as health information, political affiliations or religious beliefs. Identity documents (MyKad, passport) are only requested when required for identity verification (KYC) purposes and are not retained longer than necessary.
Bolahiu collects your personal data through several different methods:
The personal data we collect is used solely for the following purposes:
Limited Purpose Principle: Bolahiu will not use your personal data for any purpose beyond those stated above without first obtaining fresh consent from you. This is our core commitment to upholding the purpose limitation principle under PDPA 2010.
Bolahiu does not sell, rent, or trade members' personal data. However, in the course of operating the platform, we may share data with the following parties on a limited basis and with appropriate safeguards in place:
In all data sharing situations described above, only the minimum data required for the specific purpose will be shared. All recipient parties are bound by confidentiality and data protection obligations that are equivalent to or stricter than Bolahiu's own standards.
Bolahiu implements a range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:
Shared Responsibility: While we implement comprehensive security measures, the safety of your account also depends on your own actions. Use a strong, unique password, do not share your login credentials, and notify us immediately if you suspect any unauthorised activity on your account.
Bolahiu retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal obligations:
Once the relevant retention period has elapsed, data will be securely deleted or anonymised so it can no longer be linked to any individual.
Website Bolahiu uses cookies and similar tracking technologies to enhance your experience and help us understand how the platform is being used:
You can manage your cookie settings through your browser settings. However, disabling certain cookies may affect the functionality or your experience on the Bolahiu platform.
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have the following rights regarding your personal data held by Bolahiu:
| Rights | Description | How to Exercise These Rights |
|---|---|---|
| Right of Access | Request a copy of the personal data we hold about you. | Email support@bolahiu.asia with the subject line "Data Access Request" |
| Right to Rectification | Request correction of data that is inaccurate, incomplete, or out of date. | Via account profile settings or support email |
| Right to Erasure | Request deletion of your data in certain circumstances, subject to legal obligations. | Email support@bolahiu.asia with the subject line "Data Deletion Request" |
| Right to Object | Objecting to the processing of your data for direct marketing purposes. | Unsubscribe link in emails or via account settings |
| Right to Restrict Processing | Request restrictions on the processing of your data in certain circumstances. | Email support@bolahiu.asia with a detailed explanation |
| Right to Withdraw Consent | Withdraw consent previously given at any time. | Via account settings or support email |
We will respond to all data subject rights requests within thirty (30) days of receiving them. For complex requests, we may require additional time and will notify you of any such extension.
Identity Verification for Data Requests: To protect your privacy, we may require identity verification before processing any requests related to your data rights. This is a precautionary measure to ensure your personal data is not disclosed to unauthorised parties.
Bolahiu is an online betting platform for users aged 18 and above only. We do not knowingly collect or process the personal data of any individual under the age of 18.
If you are a parent or guardian and suspect that your child under the age of 18 has registered a Bolahiu account using false information, please contact us immediately at support@bolahiu.asia. We will investigate the matter, close the relevant account and promptly delete all associated data.
Age Verification: Bolahiu conducts age verification during the registration process and reserves the right to request identity verification documents at any time to ensure all members meet the minimum age requirement of 18. Accounts that fail to verify age will be suspended pending investigation.
Bolahiu reserves the right to modify this Privacy Policy from time to time to reflect changes in our data practices, platform technology, legal requirements, or other operational reasons.
When there are significant changes to this Privacy Policy, we will:
Continued use of the platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and request data deletion in accordance with the procedure set out in Section 9.
If you have any questions, concerns or complaints regarding how Bolahiu handles your personal data, or if you wish to exercise any of the rights set out in Section 9, please contact us via:
We are committed to responding to all privacy-related enquiries within 48 business hours. For more complex data subject rights requests, processing may take up to 30 days as outlined in Section 9.
If you believe that Bolahiu has failed to handle your personal data in accordance with Malaysia's PDPA 2010 and you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia or the relevant regulatory body.
Many online players skip the privacy section when signing up for a new account — it's lengthy, packed with legal jargon, and most platforms seem to say the same thing. But for an online betting platform like Bolahiu, a privacy policy is more than a formality. It explains concretely what happens to your personal and financial information — including your bank account number, Touch 'n Go or GrabPay details, and transaction history that may involve amounts ranging from hundreds to thousands of ringgit.
The first thing people always ask: does Bolahiu sell my data? The answer is short and clear — no. Your data is not a source of revenue for us. Bolahiu's business model is a betting platform, not a data business. The information you provide — your name, phone number, email, bank details or e-wallet information — is used solely to operate the service: processing deposits via DuitNow or FPX, verifying your identity for account security, and sending important notifications about your account activity.
Second, regarding the security of your financial data. When you make a deposit using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay or via FPX to Maybank or CIMB, your transaction details are transmitted over a 256-bit SSL encrypted connection. This means the data travelling between your phone, the payment system and the platform Bolahiu cannot be read by any party attempting to intercept the communication. The same encryption standard is used by Malaysia's online banking systems.
One thing Malaysian players should be aware of is their rights under the Personal Data Protection Act 2010 (PDPA). The PDPA is Malaysian law that governs how companies may collect and use personal data. It gives you the right to know what data is held about you, to request corrections if any information is inaccurate, and in certain circumstances to request that the data be deleted. Bolahiu fully complies with all PDPA requirements — this is not merely a claim; it is a legal obligation we take seriously.
About cookies — the platform Bolahiu uses cookies for a number of different purposes. Some cookies are essential for the platform to function — for example, cookies that maintain your login session so you do not have to sign in again every time you open a new page. Others help us understand which parts of the platform are used most frequently, so we can focus improvements where they matter most to Malaysian players. These are all standard practices in the technology industry, and we are fully transparent about them.
How long data is retained is a question most people never think to ask — but it matters. Financial transaction records at Bolahiu retained for a minimum of seven years in accordance with Malaysian accounting and anti-money laundering compliance requirements. This is not our choice — it is the same legal obligation that applies to all financial institutions in Malaysia. Identity documents are retained for five years after account closure. After these periods, data is securely deleted or anonymised.
One aspect that we at Bolahiu proud of is our commitment to user control. You can manage your marketing communication preferences directly from your account settings without needing to contact support. If you no longer wish to receive promotional emails about the latest bonuses for Malaysia Super League or EPL fixtures, you can unsubscribe with a single click and it takes effect immediately. This is your right, and we make it easy to exercise.
Finally, if you have any concerns about your data privacy at Bolahiu, do not hesitate to reach out. Our Malay-speaking support team is available via live chat or email at support@bolahiu.asia. Privacy is not something you should have to worry about when playing at Bolahiu — and this clear, transparent policy is our commitment to making sure of that.
Also read other important documents governing how Bolahiu operates and protects its members.
Register free in 2 minutes. Your data is protected by SSL 256-bit encryption and governed by PDPA 2010. Deposit from RM20 using Touch 'n Go, GrabPay, or DuitNow and start betting on Liga Super Malaysia, EPL, badminton, and more.
18+ only | SSL 256-bit | Responsible Gaming