bosjudi Privacy Policy — How We Handle Your Personal Data

1 Data Controller Identity

bosjudi operates the Platform under an international gaming licence. As data controller, bosjudi is responsible for determining the purposes and means of processing personal data collected through the Platform. All data protection queries, subject access requests, and complaints should be directed to the bosjudi Data Protection contact detailed in Section 13 of this Policy.

2 Personal Data We Collect

bosjudi collects personal data in the following categories:

bosjudi does not intentionally collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or biometric data) beyond what is strictly required for age and identity verification under applicable KYC obligations.

3 How We Use Your Personal Data

bosjudi uses personal data collected from users for the following purposes:

• Account management: To register your account, verify your identity (KYC), and maintain your user profile on the bosjudi Platform.
• Service delivery: To process deposits and withdrawals in MYR, operate your gaming account, and deliver the games and services you access.
• Legal and regulatory compliance: To fulfil anti-money laundering (AML), counter-terrorism financing (CTF), and age verification obligations under applicable gaming and financial regulations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account abuse, unauthorised access, and other security incidents.
• Customer support: To respond to your enquiries, resolve disputes, and manage complaints.
• Responsible gaming: To monitor gambling patterns and proactively offer responsible gaming tools where indicators of problem gambling are detected.
• Platform improvement: To analyse usage patterns and improve the functionality, design, and content of the bosjudi Platform.
• Marketing communications: To send promotional offers, bonus notifications, and platform updates — subject to your communication preferences and applicable opt-out rights.

4 Legal Basis for Processing

bosjudi processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and bosjudi (account operation, payment processing, service delivery).
• Legal obligation: Processing required to comply with AML, KYC, and other applicable regulatory obligations.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where your explicit consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Data Sharing & Third Parties

bosjudi does not sell your personal data to third parties. We may share personal data with the following categories of recipients, strictly to the extent necessary for the stated purpose:

• Payment processors: Financial institutions and e-wallet providers (including Touch 'n Go eWallet, Boost, Maybank, CIMB, and FPX operators) for the processing of deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML compliance service providers used for identity document verification and sanctions screening.
• Game providers: Licensed game studios whose titles are hosted on or integrated into the bosjudi Platform, to the extent necessary for game session operation.
• IT and infrastructure providers: Cloud hosting, security, and technical support service providers operating under binding data processing agreements.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory obligation, bosjudi will disclose personal data to competent authorities without notice to the user where legally permitted or required.

All third-party processors engaged by bosjudi are bound by contractual data protection obligations consistent with this Policy.

6 Cookies & Tracking Technologies

bosjudi uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function — session authentication, security tokens, and load balancing. These cannot be disabled.
• Functional cookies: Store your preferences such as language settings, remembered username, and UI display options.
• Analytics cookies: Collect anonymised data on page visits, session duration, and navigation patterns to help us improve the bosjudi Platform.
• Marketing cookies: Used to track referral sources and attribution for bosjudi's promotional campaigns. Only deployed with your consent.

You may manage non-essential cookie preferences through your browser settings. Disabling essential cookies will impair Platform functionality and may prevent login.

7 Data Retention

bosjudi retains personal data for as long as necessary to fulfil the purposes set out in this Policy, subject to the following minimum retention periods:

• Account and identity data: Retained for the duration of the account and for a minimum of five (5) years following account closure, in compliance with AML and gaming regulatory obligations.
• Financial transaction records: Retained for a minimum of seven (7) years from the transaction date, consistent with standard financial record-keeping requirements.
• Customer support communications: Retained for two (2) years from the date of the final interaction.
• Marketing preferences and consent records: Retained for three (3) years from the date of consent or last interaction.

Upon expiry of the applicable retention period, data is securely deleted or anonymised.

8 Data Security

bosjudi implements technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between users and the Platform;
• Encryption of sensitive data at rest (including payment information and identity documents);
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security audits and penetration testing of Platform infrastructure;
• Two-factor authentication (2FA) support for all user accounts;
• Intrusion detection systems and 24/7 security monitoring.

Notwithstanding these measures, no internet-based platform can guarantee absolute security. Users are encouraged to use strong, unique passwords and to enable 2FA on their bosjudi accounts.

9 International Data Transfers

bosjudi operates internationally and may transfer personal data to servers and processors located outside Malaysia. Where such transfers occur, bosjudi ensures that appropriate safeguards are in place — including contractual data protection clauses binding the recipient to equivalent standards of protection. By using the bosjudi Platform, you acknowledge and consent to the potential transfer of your personal data to jurisdictions outside Malaysia in accordance with this Policy.

10 Your Data Rights

Depending on applicable laws, you may have the following rights in respect of your personal data held by bosjudi:

• Right of access: To request a copy of the personal data bosjudi holds about you.
• Right to rectification: To request correction of inaccurate or incomplete personal data.
• Right to erasure: To request deletion of your personal data, subject to overriding legal or regulatory retention obligations.
• Right to restriction: To request that bosjudi restrict processing of your personal data in certain circumstances.
• Right to object: To object to processing based on legitimate interests, including marketing communications.
• Right to data portability: To receive a structured, machine-readable copy of your personal data where processing is based on consent or contractual necessity.
• Right to withdraw consent: Where processing is based on your consent, to withdraw that consent at any time without affecting prior lawful processing.

To exercise any of the above rights, contact bosjudi at [email protected]. We will respond to verified requests within 30 days. Identity verification may be required before a request is fulfilled.

11 Children's Privacy

The bosjudi Platform is strictly restricted to individuals aged 21 years and above. bosjudi does not knowingly collect or process personal data from persons under the age of 21. If bosjudi becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, the data will be deleted, and any balance held in the account will be returned to the depositing payment method following investigation.

If you believe a minor has accessed or registered on the bosjudi Platform, please contact us immediately at [email protected].

12 Updates to This Policy

bosjudi reserves the right to update this Privacy Policy at any time. Where changes are material, we will notify registered users via email or a prominent notice on the Platform. The effective date at the top of this Policy will be updated to reflect the date of the most recent revision. Continued use of the bosjudi Platform following notification of a revised Policy constitutes acceptance of the changes.

13 Contact & Data Protection Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by bosjudi, please contact us via:

• Live chat: Available 24/7 on the bosjudi Platform
• Email: [email protected]

We take data protection matters seriously. All privacy-related correspondence will be acknowledged within 48 hours and substantively responded to within 30 days of receipt.