Privacy Policy — bull888

This Privacy Policy (hereinafter "Policy") is issued by bull888 (hereinafter "bull888", "we", "us", or "our"), the operator of the online sports betting and live casino platform accessible at https://bull888.cam (hereinafter the "Platform"). This Policy explains how bull888 collects, uses, stores, protects, and discloses the personal data of individuals who access or use the Platform (hereinafter "User", "you", or "your").

bull888 is committed to safeguarding your privacy and complying with applicable data protection laws and regulations in the jurisdictions in which we operate. This Policy applies to all personal data collected through the Platform, including data provided during account registration, account use, financial transactions, customer support interactions, and any other engagement with bull888's services.

By registering an account on the Platform or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue your use of the Platform.

For the purposes of this Privacy Policy, the following terms shall have the meanings assigned below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, deletion, or destruction.
• "Data Controller" means bull888, as the entity that determines the purposes and means of Processing Personal Data collected through the Platform.
• "Data Processor" means any third party that Processes Personal Data on behalf of bull888, pursuant to a written data processing agreement.
• "Cookies" means small text files placed on a User's device by the Platform for purposes of functionality, security, and analytics.
• "KYC Data" means identity and address verification documentation submitted by Users as part of the Know Your Customer process, including identity cards (MyKad), passports, and utility bills.
• "Transaction Data" means records of deposits, withdrawals, bets placed, game outcomes, and associated payment method information processed through the Platform.

bull888 collects Personal Data from Users through the following categories and channels:

When you create an Account, we collect: full legal name, date of birth, email address, phone number, and residential address. This information is required to establish and verify your Account.

To comply with anti-money laundering (AML) obligations and age verification requirements, we collect copies of government-issued identification documents (Malaysian MyKad, passport, or equivalent), proof of residential address (utility bills, bank statements), and, where required, source of funds documentation.

We collect records of all deposits and withdrawals processed through the Platform, including payment method type (e.g., Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, BTC, USDT), transaction amounts in MYR, transaction timestamps, and reference numbers. We do not store full card numbers or full bank account credentials.

We collect records of all bets placed, games played, outcomes, session durations, and in-game interactions. This data is used for account management, dispute resolution, responsible gambling monitoring, and regulatory compliance.

We automatically collect certain technical data when you access the Platform, including: IP address, browser type and version, operating system, device type, referring URL, pages visited, and session timestamps. This data is collected via server logs and cookies.

We retain records of communications between you and bull888's support team, including live chat transcripts, email correspondence, and WhatsApp messages where applicable, for quality assurance and dispute resolution purposes.

bull888 processes Personal Data for the following purposes:

• Account Management: Creating, maintaining, and administering your Account on the Platform, including processing deposits and withdrawals in MYR.
• Identity Verification: Conducting KYC checks to verify your age (21+), identity, and address in compliance with applicable AML and regulatory requirements.
• Payment Processing: Facilitating deposits and withdrawals via local and international payment methods, including reconciling transactions and resolving payment disputes.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, bonus abuse, money laundering, and unauthorised account access.
• Responsible Gambling: Monitoring betting patterns to identify signs of problem gambling, applying player-requested limits and self-exclusion orders, and fulfilling our responsible gambling obligations.
• Customer Support: Responding to enquiries, resolving complaints, and providing assistance via live chat, email, and WhatsApp.
• Legal and Regulatory Compliance: Meeting obligations under applicable laws, including responding to lawful requests from regulatory authorities or law enforcement agencies.
• Platform Analytics and Improvement: Analysing aggregated, anonymised usage data to improve the Platform's features, performance, and user experience.
• Communications: Sending service-related communications including account notifications, withdrawal confirmations, and policy update notices.

bull888 processes Personal Data on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform our obligations to you under the Terms and Conditions, including account management and payment processing.
• Legal Obligation: Processing required to comply with applicable laws, including AML regulations, age verification requirements, and responses to lawful regulatory requests.
• Legitimate Interests: Processing conducted for bull888's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights and interests.
• Consent: Where no other legal basis applies, we will seek your explicit consent before processing your Personal Data for a specific purpose. You may withdraw consent at any time without affecting the lawfulness of prior processing.

bull888 does not sell your Personal Data. We may share your Personal Data with the following categories of recipients only where necessary and proportionate:

We engage third-party service providers to assist in operating the Platform, including payment gateway operators (processing MYR transactions via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and local bank channels), KYC and identity verification providers, fraud detection service providers, data hosting and cloud infrastructure providers, and customer support platform operators. All such providers are bound by data processing agreements requiring them to process Personal Data only on bull888's instructions and in accordance with applicable data protection standards.

bull888 may disclose Personal Data to competent governmental authorities, regulatory bodies, law enforcement agencies, or courts where required by applicable law, court order, or formal regulatory request. Such disclosures are made strictly to the extent required by law and will be documented internally.

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of bull888's assets, your Personal Data may be transferred to the relevant successor entity as part of that transaction. We will provide reasonable notice of any such transfer and the successor entity will be required to honour this Privacy Policy or provide a materially equivalent level of protection.

bull888 uses cookies and similar technologies on the Platform for the purposes described below. A cookie is a small text file placed on your device by our web server when you visit the Platform.

• Essential Cookies: Strictly necessary for the Platform to function. These enable login sessions, security features, and basic navigation. They cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences, such as language settings and display options, to improve your experience on return visits.
• Analytics Cookies: Collect anonymised data about how Users navigate the Platform — pages viewed, session durations, and feature interactions. Used strictly for internal improvement purposes. We do not share analytics data with third-party advertising networks.
• Security Cookies: Used to detect and prevent fraudulent activity, including multi-accounting attempts and session hijacking.

bull888 retains Personal Data for no longer than is necessary for the purposes for which it was collected, subject to the following retention periods:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with any identified individual. Where data is required to be retained due to an ongoing legal, regulatory, or dispute-resolution matter, retention will continue until that matter is fully resolved.

bull888 implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption of sensitive Personal Data (including KYC documents and financial records) at rest using industry-standard algorithms.
• Strict access controls ensuring that Personal Data is accessible only to authorised personnel on a need-to-know basis.
• Multi-factor authentication (MFA) for administrative access to systems that hold Personal Data.
• Regular security audits and penetration testing of our infrastructure.
• Employee data protection training and mandatory confidentiality obligations for all staff with access to Personal Data.
• Incident response procedures for identifying, containing, and reporting Personal Data breaches.

Notwithstanding the above, no method of electronic transmission or storage is completely secure. bull888 cannot guarantee absolute security of Personal Data but commits to maintaining commercially reasonable and industry-appropriate security standards.

Subject to applicable law, you have the following rights in respect of the Personal Data bull888 holds about you. To exercise any of these rights, please submit a written request to our support team. We will respond within 30 calendar days of receiving a valid request.