Official Documents

Privacy Policy bull88

Your privacy is our priority. This document clearly explains how bull88 collects, uses, stores, and protects your personal data as a user of our platform in Malaysia.

Updated: 1 January 2026 Malay Official Version

Bull88's Six Data Protection Principles

Bull88 operates on six core principles in managing users' personal data — each designed to ensure your privacy is fully protected.

High-Level Encryption

All personal data and financial transactions on bull88 are protected with 256-bit SSL encryption — the same standard used by major banking institutions in Malaysia. Your data cannot be accessed by unauthorised parties.

No Data Sales

Bull88 has never and will never sell, rent, or supply your personal data to advertisers or unrelated third parties. Your information belongs to you — it is not our business commodity.

Full User Control

You have the full right to access, correct, download, or request deletion of your personal data at any time through your account settings or by contacting the bull88 support team.

Data Minimisation

Bull88 only collects data that is strictly necessary to manage your account, process payments, and comply with legal requirements. We do not collect excessive information that is irrelevant to our services.

Retention Period Overview

Your personal data is retained only for as long as necessary for the stated purposes or as required by Malaysian law. After that period, data will be securely deleted or anonymized.

Breach Notification

In the event of any security incident involving your personal data, bull88 is committed to notifying you in a timely manner in accordance with applicable data protection laws.

01 Information Collected

When you register and use the bull88 platform, we collect several categories of personal information to ensure our services operate securely, smoothly, and in compliance with applicable laws in Malaysia.

Information you provide directly:

  • Full name as stated on your identity card or passport.
  • Date of birth for age verification purposes (18 years and above).
  • Active email address used for account communications.
  • A Malaysian phone number registered in your name.
  • Bank account or e-wallet information (Touch 'n Go, GrabPay) for processing deposits and withdrawals.
  • Identity documents and financial statements during the KYC (Know Your Customer) process.

Information collected automatically:

  • IP address and device information (operating system, browser type, screen resolution).
  • Activity log data — pages visited, access times, in-platform actions.
  • Approximate location information based on IP address for security purposes.
  • Unique device identifier used to detect new logins or suspicious activity.
  • Game session data — bets placed, wins, losses, and session duration.

bull88 does not collect credit card numbers directly. All card payments are processed by trusted, PCI-DSS-compliant third-party payment processors; bull88 does not store your card data.


02 How We Use Your Data

Collected personal data is used responsibly for the following purposes only. bull88 does not use your data for any purpose unrelated to the services you use.

Purpose of Use Legal Basis Data Involved
Account Management Contract performance Name, email, phone number
Transaction Processing Contract performance Bank/e-wallet details, payment records
Identity Verification (KYC) Legal obligation Identity documents, date of birth
Fraud Prevention Legitimate interest IP address, device identifier, activity logs
Customer Support Contract performance Email, communication records
Responsible Gaming Public interest Session data, betting patterns
Marketing Communications Your consent Email, phone number (if permitted)

For marketing communications, you may withdraw consent at any time through the notification settings in your account or by contacting the bull88 support team.


03 Data Sharing

Bull88 does not sell, rent, or share your personal data with third parties for their own marketing purposes. However, in operating our platform, we may need to share data with certain categories of parties under limited circumstances:

  • Payment service providers — to process your deposits and withdrawals securely. They receive only the data necessary for those transactions.
  • Game software providers — companies such as Pragmatic Play, Evolution Gaming, and others need to receive user identifiers to operate game sessions. They do not receive your financial information.
  • KYC service providers — trusted third-party identity verification platforms help us verify your documents efficiently and securely.
  • Legal Authority — bull88 will disclose data when required by a court order, regulatory requirement, or lawful law enforcement authority.
  • Business transfer — in the event of a merger, acquisition, or asset sale, user data may be transferred to the successor entity with equivalent privacy protections in place.

All third parties we engage are bound by strict data processing agreements, ensuring they handle your information to the same or higher data protection standards that we ourselves uphold.


04 Data Security

Bull88 invests seriously in cybersecurity infrastructure to protect your personal data from unauthorized access, disclosure, modification, or destruction.

The technical security measures we implement include:

  • Data encryption in transit using TLS 1.3 — the highest security standard currently available.
  • Data encryption at rest using AES-256 for all sensitive information in our database.
  • Passwords are hashed using the bcrypt algorithm — we cannot view your password in its original form.
  • Intrusion detection systems (IDS/IPS) that monitor network traffic in real time.
  • Periodic security audits by independent third parties to identify and address system vulnerabilities.
  • Two-factor authentication (2FA) is available for all bull88 user accounts.
  • Strict internal access controls — only authorised staff can access user data, and every access is logged.

While we take all reasonable measures, no system can be guaranteed 100% secure. You also play an important role in protecting your account — use a strong password, enable 2FA, and never share your login credentials with anyone.


05 Cookies & Tracking

Bull88 uses cookies and similar tracking technologies to enhance user experience, analyze platform performance, and ensure your account security. The following are the types of cookies we use:

  • Essential Cookies (Required) — required for the platform to function properly. This includes login session cookies, CSRF security tokens, and language preferences. These cookies cannot be disabled.
  • Functional Cookies — remembers your preferences such as your chosen language, configured betting limits, and game display settings.
  • Analytics Cookies — helps us understand how users interact with the platform so we can make improvements. Data is collected in aggregate and does not identify you individually.
  • Security Cookies — used to detect suspicious login activity, fraud attempts, and access from new devices.

You can manage cookie settings through your browser preferences. However, disabling essential cookies may affect the functionality of the bull88 platform.

bull88 does not use third-party cookies for retargeting advertising. We do not track your activity on other websites outside the bull88 platform.


06 Cross-Border Data Transfers

As an online platform, some of your personal data may be processed or stored on servers located outside Malaysia, particularly by the technical service providers and cloud infrastructure we use.

Bull88 ensures that any cross-border data transfers are carried out with adequate safeguards, including:

  • Using cloud infrastructure providers with recognised international security certifications (ISO 27001, SOC 2 Type II).
  • Ensuring that appropriate data transfer agreements exist between bull88 and data recipients outside Malaysia.
  • Selecting data processing locations in countries with equivalent or stricter data protection laws.

By using the bull88 platform, you consent to the transfer of your personal data as described in this section, carried out solely for the purpose of delivering services to you.


07 Your Rights

As a bull88 user based in Malaysia, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

Right to Access

You may request a copy of all personal data we hold about you at any time. Requests will be processed within 14 working days.

Right to Rectification

If your personal data is inaccurate or incomplete, you may request a correction through your profile settings or by contacting customer support.

Right to Erasure

You may request deletion of your personal data, subject to legal retention requirements and account settlement obligations.

Right to Restrict Processing

Under certain circumstances, you may request that we restrict the processing of your data while a dispute is being resolved.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format for transfer to another platform if needed.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time, and we will stop such processing immediately.

To exercise any of the above rights, contact the bull88 privacy team via email at [email protected] or via live chat. Please provide proof of identity for verification before your request is processed.


08 Children's Data

The bull88 platform is an online gambling service permitted only for individuals aged 18 and above. bull88 does not intentionally collect or process personal data from individuals under the age of 18.

Should we discover that personal data of an underage individual has been collected unintentionally, we will take the following steps immediately:

  • Suspending the associated account while an investigation is conducted.
  • Permanently deleting all associated personal data.
  • Reporting incidents to the relevant authorities where required by law.

If you believe that someone under the age of 18 has registered a bull88 account, please contact us immediately through the available support channels.


09 Data Retention Period

Bull88 retains your personal data only for as long as necessary to fulfill the purposes stated in this policy or as required by applicable Malaysian law.

  • Active account data — retained for the duration that your account remains active and in use.
  • Post-account closure data — transaction records and KYC information are retained for a minimum of 5 years following account closure to comply with Malaysia's Anti-Money Laundering (AMLA) legal requirements.
  • Security logs — retained for 12 months for security incident investigation purposes if necessary.
  • Customer support communications — retained for 3 years for reference and dispute resolution purposes.
  • Marketing data — deleted within 30 days after you withdraw consent for marketing communications.

Upon expiry of the applicable retention period, your data will be securely deleted or anonymised so that it can no longer be personally associated with you.


10 Third-Party Links

The bull88 platform may contain links to third-party websites or services in certain contexts, such as game providers or payment partners. This Privacy Policy applies solely to the bull88 platform itself.

Bull88 is not responsible for the privacy practices of third-party websites or services. We encourage you to read the privacy policy of any third-party website or service you visit before providing any personal information to them.

If you access games operated by third-party providers within the bull88 platform, those providers may also process technical data from your gaming session. Further information is available in the respective provider's terms of service.


11 Changes to This Policy

Bull88 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements.

When material changes are made, we will notify you via:

  • In-platform bull88 notification upon your next login.
  • Email to the address registered on your account at least 14 days before changes take effect, for significant changes.
  • Update the "Last Updated" date at the top of this document.

Continued use of the bull88 platform after changes take effect constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to close your account before the changes take effect.


12 Contact Us

For any enquiries, requests, or complaints regarding the Privacy Policy and the management of your personal data at bull88, please contact us through the following channels:

  • Live Chat — available 24 hours a day, 7 days a week, directly within the bull88 platform. This is the fastest way to get an immediate response.
  • Privacy Email — [email protected] (response within 1–2 business days for privacy-related enquiries).
  • WhatsApp — your number is available within your account after login, for more personalised communication.

For information regarding the platform's terms of use, please refer to Terms & Conditions bull88. For information on responsible gambling, visit the Responsible Gaming us.

Frequently Asked Questions About bull88 Privacy

Answers to the most frequently asked questions by Malaysian users regarding data protection and privacy on the bull88 platform.

No, absolutely not. bull88 has never and will never sell, rent, or supply your personal data to advertisers or any third party for their own marketing purposes. Your data is used solely for the purpose of operating bull88's services for you, including account management, payment processing, and platform security.

All your banking and e-wallet information is transmitted via encrypted TLS 1.3 connections and processed by PCI-DSS compliant third-party payment processors. bull88 does not store your credit card numbers or internet banking passwords. We retain only the minimum information required to process your fund withdrawals.

Yes, you may request the deletion of your personal data. However, please note that transaction records and KYC documents must be retained for a minimum of 5 years following account closure to comply with Malaysia's Anti-Money Laundering laws (AMLA). All other data not subject to legal retention requirements will be deleted within 30 days of your request being received and verified.

Accounts inactive for 12 consecutive months will receive an email notification from bull88. If no activity follows that notification, the account may be temporarily suspended for security purposes. Your data remains stored for the period specified in this policy. You can reactivate your account at any time by contacting our customer support.

Yes. bull88 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and other applicable legal requirements, including the Anti-Money Laundering Act 2001. We continually update our data management practices whenever there are changes in legislation or relevant regulatory guidelines.

You can stop receiving promotional emails in two easy ways: first, click the "Unsubscribe" link at the bottom of any promotional email you receive; or second, log in to your bull88 account and update your notification settings under Profile. Changes take effect within 48 hours. Please note that important account-related emails such as transaction confirmations and security alerts cannot be disabled, as they are essential to your account's security.

Safe & Trusted Platform

Your privacy is protected at bull88. Register now and enjoy a safe, fair, and exciting betting experience alongside hundreds of thousands of members across Malaysia.

SSL-Protected Data 256-Bit Encryption Secure KYC 24/7 Support
Bahasa Melayu