Rujukan Laman

Open Your Privacy Terms Clearly

Your bones888 account data, cookie settings and Touch 'n Go, GrabPay, Boost dan FPX records are handled under this Privacy Policy before you enter the lobby.

Malaysia privacy termsAccount data useCookie controlsPayment record care
bones888 Open Your Privacy Terms Clearly
CONTACT ROUTES

Check Privacy Contact Paths

Privacy questions should reach the team that can see account, wallet and security logs without asking you to repeat sensitive details in public channels.

In-account chat Use chat after login when your request concerns wallet records, login history or a…
Email privacy desk Send privacy requests by email when you need a copy of data, a correction…
Payment record checks For Touch 'n Go, GrabPay, Boost dan FPX queries, share the receipt reference and…
ACCOUNT SAFETY

Browse Your Privacy Controls

We handle privacy through practical account controls rather than vague promises. Login data, device signals, cookie choices, wallet events and support messages are kept in separate workflows where possible, so a request…

Account data collection

When you join, we collect details such as your name, mobile number, login credentials and account settings. These details help us create your profile, protect access and communicate about privacy or wallet matters.

Cookie and device signals

Cookies help us keep you signed in, remember language choices and detect unusual access patterns. Device signals may include browser type, IP range and session timing, which support account security checks.

Wallet and payment records

Touch 'n Go, GrabPay, Boost dan FPX records are stored as transaction references, status changes and timestamps. We use them to reconcile deposits, verify withdrawal checks and respond to payment-related privacy requests.

Sharing with service partners

We share data only with service partners that support hosting, security checks, payment processing, customer service or legal requests. Each partner receives the limited data needed for that specific task.

Retention and deletion

We keep data for as long as needed to run the account, resolve disputes, meet legal duties and detect misuse. When retention no longer applies, we delete or anonymise records in line with our process.

Change and access requests

You can ask for access to your data, correction of inaccurate details or removal where allowed. We verify identity first because privacy rights must be handled without exposing your account to another person.

Discover Privacy Answers Before Joining

These answers explain how this Privacy Policy works when you open an account, use Malaysia payment channels, change account details or ask us to handle your data differently. They are written for practical privacy decisions, not broad platform claims. If your request depends on law, payment status or account verification, we will explain what we need before taking action.

We collect details needed to create and protect your account, such as name, contact number, login credentials and account settings. We also record session activity, wallet events and support messages linked to your profile.

We use payment records to match wallet activity with receipt references, timing, amount and status. These records help us reconcile transactions, answer privacy questions and check withdrawal requests without asking for private banking passwords.

Yes. Contact us through in-account chat or email and ask for account data access. We will verify your identity first, then explain what records can be shared and the expected response path.

Send the corrected detail through a verified contact path and include your account ID. We may ask for supporting proof before updating names, mobile numbers, payment labels or other account fields tied to privacy records.

Yes. Cookies keep sessions active, remember preferences and help detect unusual access. You can adjust browser settings, but some account functions may not work properly if essential cookies are blocked.

We share limited data with partners that help operate hosting, payment processing, security checks, support tools or lawful requests. We do not sell your account profile, and each sharing step is tied to a defined task.

We keep data while your account remains active and for the period needed to meet legal duties, resolve disputes and check security events. When retention no longer applies, records are deleted or anonymised.