BossJudi Privacy Policy – Data Protection for Malaysian Players

Welcome to the Privacy Policy bossjudi. This document is our moral contract with you – it transparently and honestly explains how the platform bossjudi handles the personal data of every member from the moment of registration through to the day you close your account.

We understand that sharing personal information with any online platform requires trust. That trust is not something we take lightly. That is why this policy is written in plain, easy-to-understand language — not packed with legal jargon that would only cause confusion. We want you to know exactly what happens to your data at bossjudi.

bossjudi is an online sports betting and casino platform operating under the domain bossjudi.click. As the platform operator ("Data Controller"), bossjudi is fully responsible for the management of all members' personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

This Privacy Policy applies to:

• All individuals who register an account on the platform bossjudi.
• Visitors browsing the bossjudi.click website even without a registered account.
• Individuals who interact with our platform through any channel, including customer support email.

By using the platform bossjudi, you agree to the collection and processing of your personal data as described in this policy. If you do not agree, please discontinue use of the platform and contact us to close your account.

We only collect data that is genuinely necessary to operate the platform bossjudi securely, lawfully and efficiently. Below are the categories of data we collect:

Account Registration Data

When you register an account bossjudi, we collect:

• Full name – for identity verification and fund withdrawals.
• Identity card number (MyKad) – for age verification (18+) and KYC compliance.
• Email address – for account communications, notifications and password recovery.
• Mobile phone number – for two-factor authentication (2FA) and instant communications.
• Date of birth – for mandatory age verification.
• Password – stored in hashed form (not plain text). We do not have access to your actual password.

Financial Transaction Data

To process deposits and withdrawals securely, we collect:

• Payment method details used (DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX).
• Deposit and withdrawal transaction history, including amounts in Malaysian Ringgit (RM), dates, and timestamps.
• Transaction reference numbers generated by the payment provider.
• Identity verification documents (copy of MyKad) requested during the KYC process for withdrawals exceeding RM1,000.

We do not store any credit or debit card numbers directly. All sensitive payment information is handled through verified payment provider systems.

Platform Activity Data

• Sports betting history (football, badminton, cricket and others) and live casino game activity.
• Login session history, including IP address, device type, and web browser.
• In-platform activity logs for security and fraud detection purposes.
• Feedback, complaints, or inquiries submitted to customer support.

Technical & Device Data

• The IP address of the device used to access the platform.
• Device type, operating system, and web browser version.
• Cookie data and session identifiers (see Section 6 for details).
• High-level geolocation data (state/city) to verify access location.

Every use of personal data by bossjudi has a clear purpose and a solid legal basis under PDPA 2010. We do not process your data for any purpose not stated in this policy.

Direct Marketing: We will only send marketing communications (promotions, bonus offers, news bossjudi) to you if you provided consent during registration or subsequently through your account settings. You may unsubscribe at any time via the "unsubscribe" link in any marketing email or through your account settings.

bossjudi does not sell members' personal data to any third party for commercial or marketing purposes. This is our absolute commitment. However, there are limited situations where we need to share data to keep the platform running:

Platform Service Providers

We work with a carefully selected and trusted group of technical service providers to operate the platform bossjudi:

• Payment Provider: DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX receive only the minimum transaction data required to process payments. All these providers are subject to strict financial security standards.
• Hosting & Infrastructure Providers: Our server hosting provider stores platform data using enterprise-grade encryption and complies with international security standards.
• Technical Support Provider: Companies that assist with fraud detection, cybersecurity, and risk analysis – strictly in aggregated or anonymised form.

All third-party service providers are required to sign a data protection agreement ensuring they handle data bossjudi to the same or stricter standards than those set out in this policy.

Authorities & Legal Requirements

We may be required to disclose personal data to the authorities in the following circumstances:

• Upon a court order or official directive from a legitimate Malaysian authority.
• To comply with legal obligations related to anti-money laundering (AML) prevention.
• To investigate or prevent fraud, identity theft, or other illegal activities involving the platform bossjudi.
• To protect the safety of a member or the public in an emergency situation.

bossjudi continuously invests in the latest security infrastructure to ensure the personal data of all members is protected at every stage — in transit, in processing, and in storage.

Technical Security Measures

• 256-bit SSL Encryption: All data transmitted between your web browser and the bossjudi is protected with 256-bit Transport Layer Security (TLS) encryption – the same standard used by Malaysia's leading banks.
• Stored Data Encryption: Sensitive data such as identification card numbers and financial information is stored in encrypted form (encrypted at rest) within the database.
• Hashed Password: Member passwords are stored using a one-way hashing algorithm (bcrypt) — meaning even staff bossjudi cannot view your actual password.
• Two-Factor Authentication (2FA): 2FA is available for all accounts and is strongly recommended for an additional layer of protection.
• Regular Vulnerability Scanning: Platform bossjudi undergoes regular penetration testing and security scanning conducted by independent third parties.
• Internal Access Controls: Staff bossjudi only have access to the data required to perform their respective roles. Access to sensitive data is automatically audited and logged.

Data Retention Period

We do not retain your personal data longer than necessary. Retention periods vary by data category:

• Active account data: Retained for the duration of the active account period plus an additional 5 years after account closure (AML legal requirement).
• Financial transaction history: Retained for 7 years in accordance with Malaysian accounting legal requirements.
• Security activity logs: Retained for 12 months for fraud investigation purposes.
• Customer support records: Retained for 3 years.
• Marketing data: Deleted within 30 days after you withdraw your consent.

Platform bossjudi uses cookies and similar tracking technologies to ensure the platform functions correctly, enhance the user experience and help us understand how the platform is used. Below are the types of cookies we use:

Essential cookies cannot be disabled as they are required for the platform to function bossjudi function — including keeping you logged in while you play. Optional cookies can be managed through your web browser settings.

To disable or manage cookies, you can use the privacy settings in your web browser (Chrome, Firefox, Safari, Edge). Please note that disabling all cookies may affect the functionality of certain platform features. bossjudi.

As a member bossjudi and data subjects under Malaysia's PDPA 2010, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact our Data Protection Officer by email at support@bossjudi.click with the subject line "Data Rights Request – [Full Name]". We will acknowledge your request within 3 working days and resolve it within 21 working days.

Platform bossjudi is intended for users aged 18 years and above only. We do not knowingly collect, process, or store the personal data of individuals under the age of 18.

If we discover that an account has been registered by a minor, the account will be terminated immediately and all associated data will be deleted from our systems within 72 hours, in accordance with applicable legal requirements.

If you are a parent or guardian who has discovered that your child has registered an account on bossjudi, please contact us at support@bossjudi.click immediately. We will act swiftly and treat this matter as our highest priority.

bossjudi reserves the right to update this Privacy Policy from time to time to reflect changes in platform operations, new legal requirements or improvements to our data protection practices.

• All members will be notified of significant changes via their registered email at least 14 days before the changes take effect.
• The date of the most recent update is always displayed at the top of this page.
• Continued use of the platform after the effective date of any changes constitutes acceptance of the updated policy.
• If you disagree with the policy changes, you have the right to close your account before the changes take effect. Any valid balance will be returned in accordance with standard procedures.

We encourage you to review this page periodically to stay informed about how we handle your personal data on the platform bossjudi.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how bossjudi handles your personal data, we strongly encourage you to contact us directly. We are committed to resolving all privacy concerns promptly and transparently.

BossJudi Data Protection Officer (DPO)
Email: support@bossjudi.click
Email subject: "Privacy Inquiry – [Full Name]"
Response time: Within 3 working days

If you are not satisfied with our response, you also have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia, the regulatory body overseeing PDPA 2010 in this country.