Privacy Policy

01 Introduction

This Privacy Policy ("Policy") is issued by JudiBoss88 ("we", "us", "our", "the Platform", "JudiBoss88"), the operator of the online casino and sports betting platform accessible at judiboss88.cam. It applies to all users who access or register on our Platform, including players based in Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, and elsewhere in Malaysia.

We are committed to handling your personal data with the care and transparency it deserves. This Policy explains in clear terms what data we collect, why we collect it, how we process and store it, and the rights you hold as a data subject. It should be read alongside our Terms & Conditions and our Responsible Gambling Policy.

By registering an account with JudiBoss88 or by continuing to use our Platform after any update to this Policy, you acknowledge that you have read and understood the practices described herein. If you do not agree with this Policy, please do not use the Platform.

02 Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, identification number, IP address, and financial account details.
• "Data Subject" means the individual whose personal data is being processed — in most cases, a registered Player on the JudiBoss88 Platform.
• "Processing" means any operation performed on personal data, including collection, storage, use, transfer, deletion, or any other handling.
• "Controller" means JudiBoss88, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Processor" means a third party that processes personal data on behalf of JudiBoss88, such as payment service providers and KYC verification partners.
• "KYC" means Know Your Customer — the identity and age verification process required before a Player may make their first withdrawal.
• "Cookie" means a small text file placed on your device by the Platform to store information about your session, preferences, or activity.
• "Sensitive Personal Data" means personal data that warrants heightened protection, including government-issued identification documents and financial account information.

03 Personal Data We Collect

JudiBoss88 collects personal data in the categories described in the table below. We collect only what is necessary for the stated purposes.

04 How We Collect Your Data

JudiBoss88 collects personal data through the following channels:

• Direct collection: Information you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotion.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including device identifiers, IP addresses, and session activity via server logs and analytics tools.
• Third-party sources: Identity and fraud-screening data received from KYC verification partners and payment processors (such as FPX operators, Touch 'n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank) during transaction processing and verification workflows.
• Cookies and tracking technologies: As described in Section 10 of this Policy.

05 Data Processing & Use

JudiBoss88 processes your personal data for the following purposes:

1. Account Management: Creating, maintaining, and administering your player account, including processing login credentials, account settings, and communication preferences.
2. Identity & Age Verification: Conducting KYC checks to verify that you are at least 21 years of age and to confirm your identity as required by our operating licence conditions.
3. Payment Processing: Facilitating deposits and withdrawals in Malaysian Ringgit (MYR) via your chosen payment method, including e-wallets, online banking via FPX, DuitNow, and cryptocurrency.
4. Fraud Prevention & Security: Detecting and preventing fraudulent activity, money laundering, multi-accounting, and other prohibited conduct described in our Terms & Conditions.
5. Responsible Gambling: Monitoring gameplay patterns to identify potential indicators of problem gambling behaviour, administering self-exclusion and deposit limit requests, and enforcing responsible gambling programme terms.
6. Customer Support: Responding to your queries, complaints, and requests, including those submitted via live chat or email.
7. Legal & Regulatory Compliance: Meeting obligations under applicable law, responding to lawful requests from courts or regulatory authorities, and maintaining records as required by our operating agreements.
8. Service Improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, and user experience.

06 Legal Basis for Processing

JudiBoss88 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the account agreement with you — including account creation, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable law, including KYC/AML obligations and regulatory reporting requirements.
• Legitimate interests: Processing necessary for our legitimate business interests, provided those interests are not overridden by your rights — including fraud prevention, platform security, and service improvement based on anonymised analytics.
• Consent: Where we rely on your consent for a specific processing activity (for example, optional marketing communications), we will obtain that consent clearly and separately, and you may withdraw it at any time without affecting your account status.

07 Data Sharing & Third-Party Disclosure

JudiBoss88 does not sell or rent your personal data. We may share your data with third parties only in the following circumstances:

• Payment processors: To facilitate your deposits and withdrawals via Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency settlement services. These processors receive only the data necessary to complete your transaction and are contractually bound to data protection standards.
• KYC and identity verification partners: To verify your identity, age, and document authenticity as part of our account opening and withdrawal procedures. These partners process your identity documents under strict confidentiality obligations.
• Fraud detection and security services: Anonymised or pseudonymised technical data may be shared with fraud prevention platforms to identify suspicious patterns across the online gaming industry.
• Legal and regulatory authorities: Where required by a court order, law enforcement request, or regulatory authority, JudiBoss88 may disclose personal data to the extent required by law. We will notify you of any such disclosure where legally permitted to do so.
• Professional advisors: Legal counsel, auditors, and compliance consultants, subject to strict confidentiality agreements.
• Group entities: Where JudiBoss88 is part of a group structure, data may be shared with affiliated entities for group-level risk management and compliance functions, subject to the same data protection standards as set out in this Policy.

08 Data Retention

JudiBoss88 retains personal data for the periods set out below, after which it is securely deleted or anonymised:

Where you request deletion of your personal data under your rights as a data subject (see Section 12), JudiBoss88 will delete or anonymise your data within 30 days, except where retention is required for the purposes of legal compliance or legitimate interest as noted in the table above.

09 Security Measures

JudiBoss88 implements a layered approach to data security, commensurate with the sensitivity of the personal data we hold and the risks associated with operating an online financial services platform. Our security measures include:

• Encryption: All personal data is encrypted at rest using AES-256 and in transit using TLS 1.3 or higher.
• Access controls: Personal data is accessible only to employees and contractors with a legitimate need to access it, enforced through role-based access controls and multi-factor authentication.
• Regular security testing: Our platform is subject to regular penetration testing and vulnerability assessments by independent security professionals.
• Incident response: We maintain a documented data breach response procedure. In the event of a breach posing risk to player rights, affected users will be notified within 72 hours.
• Data minimisation: We collect and retain only data that is strictly necessary for the stated purpose, reducing the volume of data exposed to any potential security incident.

10 Cookies & Tracking Technologies

JudiBoss88 uses cookies and similar tracking technologies to support the operation of our Platform. The types of cookies we use are described below:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Store your preferences, such as your chosen language or display settings, so you do not need to re-configure them on each visit.
• Analytics Cookies: Collect anonymised information about how Players use the Platform, which pages are visited most frequently, and how users navigate between sections. This data is used to improve the Platform experience. No individual player is identified in analytics reports.
• Security Cookies: Used for fraud detection and session integrity, including identifying anomalous login patterns and geolocation checks.

JudiBoss88 does not currently use third-party advertising or behavioural targeting cookies. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair the functionality of the Platform.

11 International Data Transfers

JudiBoss88 may transfer personal data to servers, processors, or affiliates located outside Malaysia. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data, including:

• Contractual obligations on the receiving party equivalent to the standards set out in this Policy;
• Transfer only to processors that operate under data protection regimes recognised as providing adequate protection; and
• Minimisation of data transferred internationally — only data necessary for the specific processing purpose is transferred.

Players whose data is transferred internationally retain the same rights under this Policy as those whose data remains within Malaysia.

12 Your Data Rights

As a data subject, you hold the following rights in relation to the personal data JudiBoss88 holds about you. You may exercise any of these rights by contacting our support team as described in Section 15.

To exercise any of these rights, please contact our support team with your registered username and email address. We may need to verify your identity before processing your request. We will respond to all valid data rights requests within 30 calendar days. Complex requests may require an extension of up to a further 60 days, in which case we will notify you promptly.

13 Minors & Age Policy

JudiBoss88 strictly prohibits registration or use of the Platform by individuals under the age of 21 years. We do not knowingly collect personal data from minors. Our KYC verification process is specifically designed to enforce this age restriction prior to any withdrawal activity.

If we become aware that personal data has been collected from a person under the age of 21 without parental or guardian consent, we will immediately terminate the associated Account, return any deposited funds via the original payment method, and delete all personal data collected in connection with that Account without undue delay.

If you believe that a person under the age of 21 has registered an Account on our Platform, please notify us immediately via the contact details in Section 15 so that we can take swift action.

14 Amendments to This Policy

JudiBoss88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. Material changes will be communicated to registered players via email or on-platform notification at least 14 days before taking effect, except where immediate changes are required for security or legal compliance reasons.

The "Last updated" date displayed at the top of this Policy will reflect the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Platform following any revision constitutes your acceptance of the updated Policy.

If the revised Policy is materially inconsistent with your expectations, you may close your Account by contacting our support team, and any confirmed Account Balance will be returned to you via your registered payment method.

15 Contact Us

If you have any questions, concerns, or requests in relation to this Privacy Policy or the personal data JudiBoss88 holds about you, please contact our team through the following channels:

• Email: [email protected] — please mark data privacy enquiries with the subject line "Data Privacy Request"
• Live Chat: Available 24/7 via the on-platform live chat widget
• Response Commitment: We target initial responses to all data privacy enquiries within 3 business days and resolution within 30 calendar days

When submitting a data rights request, please include your registered username and the email address associated with your JudiBoss88 account so we can locate your records promptly. For security purposes, we may ask you to verify your identity before processing your request.