Privacy Policy

1 Introduction

This Privacy Policy (the "Policy") is issued by BosJudi (the "Company", "We", "Us", or "Our"), the operator of the online gambling platform accessible at https://bosjudi.cam (the "Platform" or "Website"). This Policy applies to all individuals who access, register on, or otherwise interact with the BosJudi platform, including players residing in Malaysia and other permitted jurisdictions.

BosJudi takes the privacy of its users seriously. We process personal data only for legitimate purposes connected to the operation of the platform and fulfilment of our legal and regulatory obligations. We do not sell personal data to third-party advertisers or marketing networks. We do not share your betting history or personal information with parties unconnected to the delivery of our services.

By accessing the BosJudi platform or creating an account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Policy, you should not use the platform.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference into this document.

2 Definitions

For the purposes of this Policy, the following terms shall have the meanings set out below:

3 Personal Data We Collect

BosJudi collects the following categories of personal data in the course of operating the platform:

3.1 Registration & Identity Data

• Full legal name;
• Date of birth (to verify minimum age of 21 years);
• Email address;
• Mobile phone number;
• Username and encrypted password;
• Country and city of residence (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam).

3.2 KYC Verification Data

• Copy of government-issued photo identification (e.g., Malaysian MyKad, passport);
• Proof of residential address (utility bill, bank statement);
• Proof of payment method (front image of bank card or e-wallet screenshot, where applicable);
• Source of funds documentation (for high-value transactions, as required by AML obligations).

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and methods;
• Payment method details — masked bank card numbers, e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), bank account name, DuitNow reference;
• Cryptocurrency wallet addresses (for USDT TRC20 and BTC transactions);
• Transaction history and balance records.

3.4 Technical & Usage Data

• IP address and approximate geolocation at login;
• Device type, operating system, and browser version;
• Session timestamps, pages visited, and actions taken on the platform;
• Betting and game play history (game titles, stake amounts, outcomes, timestamps);
• Customer support interaction records (chat logs, email correspondence).

3.5 Responsible Gambling Data

• Deposit limit settings, session time preferences, and cooling-off periods configured by the player;
• Self-exclusion status and duration;
• Any problem gambling indicators flagged by our monitoring systems.

4 How We Collect Your Data

BosJudi collects personal data through the following channels:

5 Legal Basis for Data Processing

BosJudi processes your personal data on the following legal grounds, depending on the purpose of processing:

• Contractual Necessity: Processing required to fulfil our obligations to you under the Terms and Conditions — including account creation, transaction processing, bonus administration, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements — including anti-money laundering (AML) obligations, KYC verification, and cooperation with law enforcement authorities where legally required.
• Legitimate Interests: Processing undertaken to protect the platform's integrity, prevent fraud and multi-accounting, improve platform performance, conduct security monitoring, and manage responsible gambling obligations — balanced against your fundamental privacy rights.
• Consent: Where required by applicable law, we will obtain your explicit consent before processing data for specific purposes such as non-essential marketing communications. You may withdraw consent at any time by contacting [email protected] or adjusting your account preferences.

6 How We Use Your Personal Data

BosJudi uses the personal data it collects for the following purposes:

6.1 Account & Platform Operations

• Creating, maintaining, and authenticating your player account;
• Processing deposits and withdrawals to and from your registered payment methods (including Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, Hong Leong, DuitNow/FPX, and cryptocurrency wallets);
• Administering bonuses, promotions, VIP tier status, and loyalty rewards;
• Delivering customer support and resolving account disputes.

6.2 Compliance & Fraud Prevention

• Verifying your identity and age (minimum 21 years) as required by our platform policies;
• Detecting and preventing fraud, multi-accounting, money laundering, and other Prohibited Activities as defined in our Terms & Conditions;
• Complying with applicable international AML and KYC regulatory requirements;
• Reporting to law enforcement or regulatory authorities where legally required.

6.3 Responsible Gambling

• Monitoring play patterns to identify potential indicators of problem gambling behaviour;
• Enforcing deposit limits, session controls, and self-exclusion decisions;
• Communicating with players who have activated responsible gambling tools or expressed concerns about their play.

6.4 Platform Improvement & Analytics

• Analysing platform usage patterns in aggregate to improve game selection, navigation, and overall user experience;
• Conducting internal security audits and performance testing;
• Personalising your experience where you have not opted out of such features.

7 Data Sharing & Disclosure

BosJudi does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share your data only in the following limited circumstances:

• Payment Processors: Your payment details are shared with the relevant payment service providers (e.g., FPX gateway operators, e-wallet processors for Touch 'n Go and Boost, banking intermediaries, cryptocurrency network validators) solely to process your transactions. These parties are bound by data processing agreements and may not use your data for any other purpose.
• KYC & AML Verification Providers: Where we engage specialist third-party identity verification services to complete KYC checks, your identity documents and personal data are shared with those providers for that sole purpose. All such providers operate under strict confidentiality obligations.
• Game Studio Providers: Certain game providers integrated into the BosJudi platform may receive your session identifiers and game interaction data for the purpose of delivering the game experience and calculating outcomes. This data is anonymised wherever technically feasible.
• Legal & Regulatory Authorities: We may be required by law, court order, or regulatory directive to disclose your personal data to law enforcement agencies, financial intelligence units, or other competent authorities. We will comply with any lawful request in this regard.
• Business Transfers: In the event of a merger, acquisition, or sale of the Company or its assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections as described in this Policy.

8 Cookies & Tracking Technologies

BosJudi uses cookies and similar tracking technologies to operate the platform, maintain your session, and collect usage analytics. The following categories of cookies are used:

You may manage non-essential cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to log in and use the platform. We do not use third-party advertising cookies or share cookie data with external advertising networks.

9 Data Retention

BosJudi retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable laws and regulations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your account's existence plus a minimum of 5 years following account closure, in compliance with AML record-keeping obligations.
• Transaction and Financial Records: Retained for a minimum of 5 years from the date of each transaction, as required by applicable international financial compliance standards.
• KYC Documents: Retained for a minimum of 5 years following the completion of the KYC process or account closure, whichever is later.
• Customer Support Records: Retained for 2 years from the date of the last interaction, unless a longer period is required to resolve an ongoing dispute.
• Usage & Analytics Data: Retained in anonymised or aggregated form indefinitely for internal platform performance monitoring. Raw session logs are retained for a maximum of 12 months.
• Responsible Gambling Records: Self-exclusion records are retained for the duration of the exclusion period plus 5 years to prevent re-registration during the exclusion window.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

10 Data Security

BosJudi implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the BosJudi platform is encrypted using SSL/TLS protocols. Look for the padlock icon in your browser address bar at bosjudi.cam.
• Encrypted Password Storage: User passwords are stored using one-way cryptographic hashing algorithms. BosJudi employees cannot retrieve your plaintext password.
• Two-Factor Authentication (2FA): Available to all players and recommended as an additional layer of account security.
• Access Controls: Access to personal data by BosJudi personnel is restricted on a need-to-know basis, with audit logging of all data access events.
• Segregated Data Storage: Player personal data and financial records are stored on segregated, access-controlled infrastructure separate from marketing and operational systems.
• Regular Security Audits: The platform undergoes periodic technical security reviews and penetration testing to identify and remediate vulnerabilities.

Notwithstanding the above, no method of electronic transmission or storage is 100% secure. BosJudi cannot guarantee absolute security of your data. In the event of a material data breach affecting your personal data, we will notify you in accordance with applicable legal requirements.

11 International Data Transfers

BosJudi operates as an international platform. Your personal data may be stored on or transferred to servers located outside Malaysia, including in countries where the data protection laws may differ from those of your home jurisdiction.

Where personal data is transferred internationally, BosJudi takes reasonable steps to ensure that such transfers are conducted under appropriate safeguards — including contractual protections, data processing agreements, and standard data protection clauses — to ensure that your data receives equivalent protection regardless of where it is stored or processed.

By using the BosJudi platform, you acknowledge and consent to the transfer of your personal data to servers located outside your country of residence for the purposes described in this Policy.

12 Your Rights Over Your Personal Data

Subject to applicable law, you have the following rights in relation to your personal data held by BosJudi. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request":

• Right of Access: You may request a copy of the personal data BosJudi holds about you. We will respond to verified requests within 30 days.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold. Minor updates (e.g., mobile number) can be made directly from your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Note that this right is subject to our legal obligations to retain certain data (e.g., AML records, KYC documents) for the minimum periods set out in Section 9.
• Right to Data Portability: You may request a machine-readable copy of the personal data you provided to us, for transfer to another service provider, where technically feasible.
• Right to Object: You may object to processing of your personal data carried out on the basis of legitimate interests — particularly for profiling or fraud monitoring — where you have grounds relating to your particular situation.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to Restrict Processing: You may request that we restrict processing of your data in certain circumstances — for example, while the accuracy of the data is being contested.

13 Children & Minors

The BosJudi platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a user below the minimum age has registered an account, we will immediately suspend that account, delete any associated personal data, and process a refund of any deposits made.

If you are a parent or guardian and believe your child may have registered an account on BosJudi, please contact us immediately at [email protected] so that we can investigate and take appropriate action promptly.

14 Third-Party Links & Services

The BosJudi platform may contain references to third-party services such as payment processors (e.g., DuitNow, FPX, Touch 'n Go eWallet infrastructure), game studios, and responsible gambling support organisations. Where users are redirected to third-party platforms, BosJudi is not responsible for the privacy practices of those third parties.

We encourage users to review the privacy policies of any third-party services they interact with in connection with their BosJudi account — including their mobile banking apps, e-wallet providers, and any responsible gambling helpline services they choose to contact.

15 Changes to This Privacy Policy

BosJudi reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. Material changes will be communicated to registered players via email or in-platform notification at least 7 days before the updated Policy takes effect.

Minor clarifications and non-substantive updates may be made without advance notice. The "Last Updated" date at the top of this document reflects the most recent revision. The current version of this Policy is always available at https://bosjudi.cam/privacy-policy.

Your continued use of the BosJudi platform following the effective date of any update to this Policy constitutes your acceptance of the revised terms. If you do not accept the updated Policy, you must cease using the platform and request account closure.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to BosJudi's data processing practices, please contact us through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request — [Your Registered Username]"
• Live Chat: Available 24/7 via the chat widget on the BosJudi platform

Our support team will respond to general privacy enquiries within 5 business days. Formal data rights requests (access, erasure, portability) will be acknowledged within 5 business days and processed within 30 calendar days of identity verification.

For Malaysian users with concerns about data handling practices not adequately addressed by BosJudi, we recommend consulting the Personal Data Protection Act 2010 (PDPA) guidelines published by Malaysia's Department of Personal Data Protection, or seeking independent legal advice.