Boss Judi Privacy Policy – Data Protection Commitment Malaysian Players

Boss Judi is the data controller for all personal information you provide to our platform. This means we are responsible for how your data is collected, stored and used in accordance with this Privacy Policy.

We take this responsibility seriously. Every data-related decision at Boss Judi – from how our registration forms are designed to how long records are retained – is made with our players' privacy interests as the first consideration.

If you ever have concerns about how Boss Judi handles your data, you have the right to contact us directly and we are obliged to respond within a reasonable timeframe. Contact details can be found in section 10 of this document.

Boss Judi only collects data that is genuinely necessary to provide you with a quality service. We do not collect excessive or irrelevant data beyond what is needed to operate the platform.

Data you provide directly:

• The username and password you chose during registration
• Active Malaysian phone number (for OTP verification)
• Email address (for account notifications and important communications)
• Payment method details you have added – e-wallet account numbers (TnG, GrabPay, Boost, ShopeePay) or bank account details for FPX and DuitNow
• Identity document (MyKad or passport) if KYC is required to verify large withdrawals

Automatically collected data:

• IP address and general location information (state/city – not your exact address)
• Device type, operating system, and browser version you are using
• Session log data – login time, logout time and session duration
• A record of all betting and gaming activity within your account
• Cookie data related to your platform preferences (explained further in Section 6)

Data Boss Judi does NOT collect:

• Full credit or debit card numbers – all transactions are processed through secure third-party payment providers
• Precise GPS location data from your device
• Personal content from your device (photos, messages, contacts)
• Biometric data such as fingerprints or facial recognition

The data we collect is used exclusively for the following purposes. We will not use your data beyond these purposes without your explicit consent:

Account Operations & Services:

• Creating and managing your Boss Judi account
• Processing deposits via TnG, GrabPay, Boost, ShopeePay, DuitNow and FPX
• Processing winnings withdrawals to your registered account
• Verifying your identity when required for security or compliance purposes
• Providing customer support in Bahasa Malaysia 24/7

Security & Fraud Prevention:

• Detecting suspicious activity or unauthorised access to your account
• Preventing duplicate account registrations and promotion abuse
• Complying with applicable anti-money laundering (AML) requirements
• Monitoring potential cybersecurity risks to the platform

Platform Improvements:

• Analysing usage patterns to improve the interface and player experience
• Testing and developing new features better suited to the needs of Malaysian players
• Resolving technical issues and platform performance problems

Communications (with unsubscribe option):

• Important account notifications such as deposit confirmations, processed withdrawals and security alerts – this cannot be disabled as it is essential operational communication
• Latest promotions and bonus updates – you can unsubscribe at any time
• Updates to Terms, Conditions and Privacy Policy – these are essential communications that cannot be disabled

Boss Judi does not sell your personal data to any third party. This is a principle we have never compromised on. That said, there are limited situations where data must be shared with third parties to keep the platform running:

Payment Providers (Required for Transactions):

• When you deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX – only the minimum transaction information required is shared with those providers to process your payment
• This sharing is technically necessary and limited strictly to the information required for the transaction
• All payment providers we work with maintain their own privacy policies and security standards

Game Providers (Limited to Session Data):

• Third-party game providers such as Pragmatic Play, Evolution Gaming and PG Soft may receive limited session data (such as anonymised session IDs) for game operation purposes and technical dispute resolution
• These providers do not receive your name, phone number, or financial information

Authorities (Where Required by Law):

• Boss Judi may be required to disclose certain data to the relevant authorities if mandated by a court order or valid legal requirement
• We will notify you of any such request where permitted by law
• We will not disclose data beyond what is specifically required

What We Will NEVER Do:

• Selling player email lists or phone numbers to marketing companies
• Sharing your betting activity profile with third-party advertisers
• Sharing data with parent companies, business partners or investors without a clear operational need

Boss Judi continuously invests in security infrastructure to keep your data safe. The technical security measures we employ include:

Encryption & Data Transmission:

• 256-bit SSL/TLS encryption for all communications between your device and our servers
• Passwords are stored in hashed form (never as plain text) using modern cryptographic algorithms
• Payment information is not stored directly on Boss Judi's servers – it is handled by payment gateways that meet PCI DSS standards

Access Controls:

• Access to the player database is restricted to staff with a legitimate operational need only
• All staff access to player data is logged and audited on a regular basis
• Two-factor authentication (2FA) is enforced for all internal administrative access

Monitoring & Incident Response:

• An automated monitoring system runs 24 hours a day to detect suspicious activity or attempted security breaches
• A clear incident response procedure for cases where a data breach may have occurred
• In the event of a material data breach affecting your account, Boss Judi is committed to notifying you within 72 hours of the incident becoming known

Your Responsibilities in Data Security:

• Choose a strong, unique password for your Boss Judi account
• Enable two-factor authentication (2FA) in your account settings
• Never share your login credentials with anyone
• Log out after every session on shared devices
• Report to us immediately if you suspect unauthorised access to your account

Boss Judi uses cookies and similar tracking technologies to enhance your experience on the platform. Below is a clear explanation of the cookies we use and their purposes:

Boss Judi does not use third-party cookies for advertising or off-platform marketing. All analytics data collected through cookies is anonymised and used internally only to understand how we can improve the experience for Malaysian players on our platform.

You can manage cookie settings through your web browser. However, disabling essential cookies will affect the platform's login functionality and security, so we do not recommend doing so.

As a Boss Judi player, you have the following rights regarding your personal data. These are not merely statements – you can exercise these rights by contacting us and we are required to respond within 30 working days.

Boss Judi strictly prohibits the registration or use of the platform by individuals under the age of 18. The protection of children and minors is a non-negotiable priority.

If we discover that a minor's personal data has been collected unintentionally — whether because the individual provided a false age during registration — we will take the following steps immediately:

• The account in question will be suspended immediately while an investigation is conducted
• All relevant personal data will be deleted from Boss Judi's systems
• Any financial transactions that have occurred will be investigated and resolved in accordance with the appropriate procedures

If you are a parent or guardian and believe your child has registered an account with Boss Judi, please contact us immediately at support@bossjudi.biz with the relevant details. We will respond and take corrective action within 24 hours.

Boss Judi may update this Privacy Policy from time to time to reflect changes in how we operate, the technologies we use, or applicable legal requirements.

When we make material changes to this policy – meaning changes that directly affect how your data is used or your rights as a player – we are committed to:

• Notifying you via in-platform notifications and your registered email at least 14 days before any changes take effect
• A prominent summary of key changes displayed at the top of any updated Privacy Policy
• Retaining previous versions of the Privacy Policy, available upon request via the support email

Minor updates such as spelling corrections or language clarifications that do not alter the substantive meaning may be made without prior notice. The "Last Updated" date at the top of each section will reflect the date of the most recent update.

Your continued use of the Boss Judi platform after an updated Privacy Policy is published and the notification period has elapsed will be considered your acceptance of those changes.

If you have any enquiries, concerns or complaints regarding this Privacy Policy or how Boss Judi handles your personal data, please reach out to us through the following channels:

• Live Chat: Fastest option – available 24/7 within the platform in Bahasa Melayu. For urgent privacy enquiries or to report account security concerns.
• Email: support@bossjudi.biz – for formal written requests such as data access requests, data deletion requests, or official complaints regarding data handling.

Boss Judi is committed to acknowledging all privacy enquiries within 24 working hours and resolving them within 30 working days. For more complex issues, we will keep you informed of the progress and expected resolution timeline.

If you are not satisfied with our response to your privacy concerns after contacting us directly, you have the right to file a complaint with the relevant data protection authority in Malaysia.