Privacy Policy BigBossJudi – Malaysian Player Data Protection

1Introduction and Scope of the Privacy Policy

BigBossJudi ("we," "the platform," or "BigBossJudi") is the data controller for all personal information collected through our website and mobile platform at bigbossjudi.best. This Privacy Policy outlines our practices regarding the collection, use, storage, protection, and disclosure of personal data belonging to Malaysian players who use our services.

This policy applies to all registered BigBossJudi players, website visitors, and anyone who interacts with our platform in any capacity. It covers all services we offer, including online casino games (slots, poker, blackjack, baccarat, live casino), Sports Betting (football, badminton, e-sports), and all platform support functions.

BigBossJudi operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable data protection legislation governing our operations. We are committed to handling your personal data in a transparent, responsible manner that respects your right to privacy.

2Types of Personal Data We Collect

BigBossJudi collects various types of personal data depending on how you interact with our platform. This data falls into several main categories:

Registration and Identity Data:

• Full name as stated on your MyKad or other valid identification document
• An active Malaysian phone number
• An active email address
• Date of birth (for age verification, 18+)
• Account password (stored in encrypted form — we do not store passwords in plain text)

Identity Verification (KYC) Data:

• A copy of your MyKad or passport (required for withdrawals exceeding a specified limit)
• Proof of current address (recent bank statement or utility bill)
• Malaysian bank account or e-wallet details used for transactions

Financial Transaction Data:

• Records of all deposits made via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX
• Records of all withdrawals to Malaysian e-wallets or bank accounts
• Transaction history including dates, amounts, and payment methods

Game Activity Data:

• Game history including game type, bet amounts, and outcomes
• Session start and end times, and the duration of each session
• Sports betting activity data, including market selections and bet outcomes

Technical and Device Data:

• IP address and general geolocation information
• Device type, operating system, and web browser version
• Platform session data and access logs
• Cookie information as described further in Section 6

3How We Use Your Personal Data

BigBossJudi uses collected personal data solely for the following legitimate and stated purposes:

• Account Management: Creating, verifying, and managing your BigBossJudi account, including the login process, identity verification, and account settings management.
• Payment Processing: Processing your deposits and withdrawals via your chosen Malaysian payment methods, including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX.
• Service Provision: Ensuring you can access and enjoy all BigBossJudi games and services, including slots, poker, blackjack, Live Casino, and Sports Betting.
• Security & Fraud Prevention: Identifying and preventing fraud, money laundering, account abuse, and other activities that violate our terms of service or Malaysian law.
• Legal Compliance: Complying with applicable legal and regulatory requirements, including any reports that may be required by Malaysian authorities.
• Customer Support: Helping you resolve issues, answer queries, and providing support in Bahasa Malaysia 24/7.
• Platform Communications: Sending important information about your account, changes to our terms, security updates, and other critical service-related notices from BigBossJudi.
• Platform Improvements: Analysing aggregated (non-personal) usage patterns to improve the user experience, identify technical issues, and plan platform enhancements.
• Marketing (with consent): Sending you information about BigBossJudi promotions, new bonuses, and special offers — only where you have given consent to receive marketing communications and only through channels you have selected.

BigBossJudi will not use your data for any purpose beyond those stated above without first obtaining your renewed consent.

4Data Sharing and Disclosure to Third Parties

BigBossJudi does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. This is an absolute policy with no exceptions, ever.

However, there are specific circumstances in which BigBossJudi may share your data with carefully selected third parties:

• Technical Service Providers: Companies that help operate BigBossJudi's technical infrastructure — including cloud computing services, payment processing, and cybersecurity systems. All such providers are bound by strict confidentiality agreements and may only use your data for specified purposes.
• Game Providers: Minimum data required to provide access to games from certified providers such as Pragmatic Play, PG Soft, or Evolution Gaming — limited to the user identifiers necessary for game functionality.
• Payment Providers: Transaction information required to process deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX. These payment providers operate in accordance with strict financial security standards.
• Legal Authorities: BigBossJudi may be required by Malaysian law or court order to disclose certain data to law enforcement agencies, the Malaysian Communications and Multimedia Commission (MCMC), or relevant government bodies. In such cases, we will endeavour to notify you in advance where permitted by law.

5BigBossJudi Data Security Measures

BigBossJudi invests heavily in security infrastructure to protect the personal and financial data of our Malaysian players. The security measures we have implemented include:

• Transmission Encryption: All communications between your browser and BigBossJudi's servers are secured with TLS 1.3 protocol using 256-bit encryption. This ensures your data cannot be intercepted by any third party while in transit over the internet.
• Stored Data Encryption: Sensitive data such as financial information and identity verification documents is stored in encrypted format on BigBossJudi's servers. Passwords are stored using a one-way hashing algorithm that cannot be reversed.
• Access Controls: Access to player personal data at BigBossJudi is strictly limited to staff who require it to perform their duties. Multi-factor authentication (MFA) is enforced for all internal access.
• Continuous Monitoring: BigBossJudi's security systems monitor all platform activity 24/7 to detect unauthorised access attempts, suspicious activity patterns, and potential cybersecurity threats.
• Regular Security Audits: BigBossJudi conducts independent security audits on a regular basis to identify and address any vulnerabilities in our systems before they can be exploited.
• Data Segregation: Players' personal data is stored separately from game and transaction data to minimise the risk of a widespread data breach in the event of a security incident.

While BigBossJudi takes all reasonable steps to protect your data, no security system can be guaranteed 100% safe from every threat. You also play a role in keeping your account secure — use a strong and unique password, never share your login details with anyone, and contact us immediately if you suspect any suspicious activity on your BigBossJudi account.

6Cookies and Tracking Technology Policy

BigBossJudi uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device when you visit our website.

You can manage cookie usage through your web browser settings. However, disabling essential cookies may disrupt core BigBossJudi platform functions such as the ability to log in and play. We recommend keeping essential cookies enabled for the best platform experience.

7Data Retention Period

BigBossJudi retains your personal data only for as long as is necessary for the purposes stated in this policy or as required under Malaysian law. The following are our data retention guidelines:

• Active Account Data: For as long as your BigBossJudi account remains active or open, we retain the personal data necessary to manage your account and provide our services to you.
• Financial Transaction Data: Records of all deposits, withdrawals, and financial activity are retained for a minimum of 7 years from the date of the transaction, in accordance with applicable Malaysian financial and tax legislation.
• Identity Verification (KYC) Data: KYC documents are retained for 5 years after the end of a player's business relationship with us, in compliance with Malaysia's anti-money laundering legislation.
• Game History: Game activity logs are retained for 2 years from the date of activity for dispute resolution, audit, and platform improvement purposes.
• Support Communication Data: All communication records with the BigBossJudi customer support team are retained for 2 years from the date of the last interaction.
• Account Terminated: Upon account termination, BigBossJudi will delete or anonymise personal data that is no longer required within 90 days, while retaining records mandated by law for the prescribed period.

8Your Personal Data Rights at BigBossJudi

As a BigBossJudi player and as an individual protected under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights with respect to your personal data:

To exercise any of the rights above, contact the BigBossJudi privacy team by email at support@bigbossjudi.best or via our platform's live chat. Please clearly state the right you wish to exercise and any relevant details. We will not charge any fee for reasonable requests and will respond within 30 business days.

If you are not satisfied with BigBossJudi's response to your privacy request, you have the right to file a complaint with the Department of Personal Data Protection Malaysia or the relevant data protection authority in your country.

9Protection of Children's and Minors' Data

The BigBossJudi platform is intended exclusively for individuals aged 18 and above. BigBossJudi does not knowingly collect, store, or process personal data of anyone under the age of 18.

If you are a parent or guardian who believes your child has registered a BigBossJudi account or submitted their personal data to our platform, please contact us immediately at support@bigbossjudi.best. We will investigate promptly and take immediate action, including deleting the relevant data and closing the account.

10Cross-Border Data Transfers

In operating the BigBossJudi platform, your personal data may be processed or stored on servers located outside Malaysia — for example, by the cloud computing service providers or international game suppliers we work with. BigBossJudi ensures that all such data transfers are carried out with appropriate safeguards in place:

• All international service providers that handle BigBossJudi player data must sign a legally binding data processing agreement.
• Data transfers are carried out in accordance with mechanisms approved under applicable data protection laws.
• The level of data protection afforded to your data by the receiving party must be equivalent to or exceed the standard set out in this policy.

BigBossJudi does not transfer player data to jurisdictions that do not provide an adequate level of data protection as assessed by us.

11Changes to the Privacy Policy

BigBossJudi reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or service improvements. Any changes will take effect immediately upon publication on this page.

For significant changes that materially affect how we use your personal data, BigBossJudi will provide advance notice via email to the address registered on your account, or through an in-platform notification, at least 14 days before the changes take effect.

The "Last updated" date at the top of this page always reflects the most recent revision. We encourage you to check this page periodically so you stay informed of how BigBossJudi protects your personal data.

12Contact Us Regarding Privacy

For any questions, concerns, or requests regarding your privacy and personal data protection at BigBossJudi, please contact us through the following channels:

• Privacy Email: support@bigbossjudi.best — please mark your email subject as "Privacy Request" to ensure it is promptly directed to the right team.
• Live Chat: Available 24/7 directly through the BigBossJudi platform — our support team is fluent in Bahasa Malaysia and can assist with basic privacy queries or direct you to the right department for more complex cases.

BigBossJudi aims to respond to all privacy enquiries within 48 hours and to resolve all formal personal data rights requests within 30 working days. There is no fee to submit a privacy request — this is your right as a BigBossJudi player.

If you are dissatisfied with how BigBossJudi has handled your personal data or our response to your privacy request, you may lodge a complaint with the Department of Personal Data Protection, Ministry of Communications and Digital, Malaysia.