Boda88 Privacy Policy – Your Data Protection

Boda88 collects various categories of personal information from members to enable us to provide a safe, efficient, and reliable service. Below is a summary table of the data types we collect and their respective purposes:

Your personal data is collected through the following channels when you interact with the boda88 platform:

• During account registration — you directly provide basic personal information such as your name, phone number, and email address.
• KYC verification process — we require valid identification documents to verify your identity before processing your first withdrawal.
• During a deposit or withdrawal — bank account or e-wallet details are collected to process your financial transactions.
• Through use of the platform — our systems automatically record technical data such as IP address, device type, and usage patterns for security purposes.
• Customer support communications — conversations via live chat, email, or other support channels are retained for quality assurance and dispute resolution purposes.
• Cookies and tracking technologies — information is collected via session cookies and preference cookies to enhance the user experience on our platform.

Boda88 uses the personal data collected for the following purposes, all within the scope of service requirements and applicable legal obligations:

• Account management — create, maintain, and ensure the security of your member account on our platform.
• Transaction processing — process all deposits, withdrawals, and credit transfers accurately and securely.
• Identity verification — conduct the necessary KYC checks to comply with anti-money laundering (AML) laws.
• Fraud prevention — identify and prevent suspicious activity, including multi-account usage and system manipulation.
• Customer support — resolve enquiries, complaints, and disputes efficiently based on your account records.
• Service improvement — analyse usage patterns in aggregate (without identifying individuals) to improve platform quality.
• Marketing communications — deliver relevant offers and promotions exclusively to members who have agreed to receive such communications.
• Legal compliance — fulfil reporting obligations to relevant authorities when required by law.

Boda88 does not sell or rent your personal data to any third party. However, we may share necessary information with the following categories of parties under limited and controlled circumstances:

• Payment service providers — banks, e-wallet operators, and payment processors that assist us in handling your financial transactions. All such parties are bound by strict confidentiality agreements.
• KYC service providers — trusted identity verification companies that assist us in conducting the necessary security checks before approving large transactions.
• Technology service providers — cloud infrastructure and technical service providers that help us operate the platform securely and efficiently.
• Statutory authorities — government agencies, law enforcement bodies, or courts when we are legally required to disclose certain information.

Protecting your personal data is boda88's highest priority. We implement multiple layers of technical and organisational controls to keep your data secure at all times:

• Data encryption in transit — all communications between your device and our servers are protected with TLS 1.3 protocol and 256-bit SSL encryption.
• Data encryption at rest — sensitive data is stored in encrypted form using the internationally recognised AES-256 encryption algorithm.
• Role-based access controls — access to member data is strictly restricted based on each staff member's job requirements, applying the principle of least privilege.
• Two-factor authentication (2FA) — our internal systems use multi-factor authentication to prevent unauthorised access to the member database.
• 24/7 security monitoring — our systems are continuously monitored to detect any intrusion attempts, unusual activity, or other security threats.
• Periodic penetration testing — we conduct regular security assessments by independent security experts to identify and address potential vulnerabilities.

While we take all reasonable precautions, no security system is entirely foolproof. You also play an important role in protecting your account by keeping your password confidential and not sharing your login credentials with anyone.

Boda88 uses cookies and similar tracking technologies to enhance the user experience and ensure platform security. The following are the types of cookies we use:

• Essential Cookies — required for core platform operations such as login, game sessions, and security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies — save your personal settings such as preferred language, display theme, and game preferences for a seamless return experience.
• Analytics Cookies — helps us understand platform usage patterns in aggregate without identifying individual users, for service improvement purposes.
• Security Cookies — used to detect suspicious login attempts and protect your account from unauthorised access.

Boda88 retains your personal data for as long as your account is active or as long as it is needed for the purposes stated in this Privacy Policy. Our general data retention guidelines are as follows:

• Active account data — retained for the duration of active account status and at least 5 years after account closure to comply with legal requirements.
• Financial transaction records — retained for a minimum of 7 years in accordance with applicable financial and tax regulatory requirements in Malaysia.
• Customer support communication logs — retained for 3 years from the date of last interaction for dispute resolution purposes.
• Technical data and security logs — retained for 12 months for security investigation and fraud prevention purposes.

When data is no longer needed for any legitimate purpose, we will securely delete or anonymise it using industry-recognised methods.

In certain circumstances, your personal data may be transferred to and stored on servers located outside Malaysia, primarily for data backup and service continuity purposes. When such transfers occur, boda88 ensures that:

• The recipient country or region maintains an adequate level of data protection.
• Appropriate data transfer agreements have been established with the relevant service providers.
• Technical measures equivalent to local data protection standards are implemented across all storage locations.

The boda88 platform is strictly for adult users aged 18 and above. We do not knowingly collect any personal information from individuals under the age of 18.

If we discover that we have collected personal data from an individual under the age of 18, we will take immediate steps to delete that information and close the relevant account. If you become aware that a minor has registered an account on our platform, please contact our support team immediately.

If you have any questions, concerns, or wish to exercise your privacy rights regarding the personal data we hold, please contact the boda88 Data Protection Officer (DPO) through the following channels:

• Email: [email protected] — for general privacy enquiries and data access requests.
• Live Chat: Available 24 hours a day, 7 days a week via the boda88 platform — for urgent issues related to account security.

We are committed to responding to all privacy-related requests within 14 working days from the date of receipt. For more complex requests such as data deletion or data transfer, the resolution period may take up to 30 business days.

If you believe we have not satisfactorily met our data protection obligations, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) as the relevant supervisory authority.