BigBossJudi Privacy Policy – Data Protection & Privacy for Malaysian Players

BigBossJudi ("we", "platform", or "BigBossJudi") takes the privacy of every Malaysian player who entrusts us with their personal information seriously. This Privacy Policy clearly and transparently explains how BigBossJudi collects, uses, stores, protects, and in certain circumstances, shares your personal information while you use our platform.

This document is written in English and designed to be easy to understand for Malaysian players. We believe you have the right to know exactly what happens to your data — not just to be protected without understanding how. This Privacy Policy forms part of Terms & Conditions BigBossJudi and should be read together with that document.

By registering a BigBossJudi account, making a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX, or by using any of our services — you agree to the collection and use of information as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account.

BigBossJudi collects various types of information to keep the platform operating securely and to deliver the best possible experience to Malaysian players. The information we collect falls into three main categories.

A. Information You Provide Directly

• Registration Information: Full name (as per MyKad), email address, mobile number, date of birth, and account password.
• Identity Verification (KYC) Information: MyKad or passport number, images of your identification document, and in certain cases, proof of residential address — collected when required for identity verification prior to large withdrawals.
• Financial Information: Details of the payment methods you use for deposits and withdrawals — including the account holder name for Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, or FPX. We do not store full eWallet account numbers or sensitive banking information.
• Communications: Any messages you send to the BigBossJudi customer support team via live chat, WhatsApp, or email.

B. Automatically Collected Information

• Technical Data: IP address, device type, operating system, browser type, and screen resolution — used to optimize your gaming experience.
• Activity Data: Login and logout records, pages visited within the platform, games played, betting history, deposits and withdrawals, and time spent on the platform.
• Cookie Data: Session information, language preferences, and display settings stored via cookies to streamline your experience on the platform.

C. Information from Third-Party Sources

• In certain circumstances related to fraud prevention or anti-money laundering, BigBossJudi may receive information from third-party identity verification service providers or relevant authorities — solely for legal compliance purposes.

BigBossJudi uses collected information solely for legitimate, clearly stated purposes. We do not use your data beyond what is required for platform operations and applicable legal obligations. The primary purposes for which we use data at BigBossJudi are outlined below.

• Account Management: To create, verify, and manage your player account — including the login process, two-factor authentication, and password recovery.
• Transaction Processing: To process all deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX, as well as withdrawals of winnings to your preferred account. Your financial information is used solely for this purpose.
• Identity Verification (KYC): To verify that players meet the minimum age requirement of 18 and to comply with anti-money laundering (AML) prevention requirements and relevant legal obligations.
• Platform Security: To detect and prevent fraudulent activity, multiple account usage, bonus abuse, and other security threats that could harm players and the platform.
• User Experience Enhancement: To analyze platform usage patterns on an aggregate — not individual — basis, in order to improve interface design, platform speed, and the relevance of content shown to Malaysian players.
• Customer Support: To help resolve technical issues, account inquiries, and transaction-related requests more quickly and effectively.
• Service Communications: To send you important account notifications — such as deposit confirmations, withdrawal confirmations, or Privacy Policy update notices. These are not marketing emails.
• Marketing Communications: Only if you have given explicit consent, we may send you information about promotions, bonuses, and new games. You may withdraw this consent at any time.
• Legal Compliance: To comply with any legal, regulatory, or court order requirements applicable to BigBossJudi's operations.

BigBossJudi does not carry out automated profiling that could significantly affect your rights or interests without human involvement. Any significant decisions regarding your account — such as suspension or closure — are subject to human review before any action is taken.

BigBossJudi invests heavily in security infrastructure to ensure your data is protected at every stage — in transit, in processing, and in storage.

Technical Security Measures:

• Transmission Encryption: All data transmitted between your device and BigBossJudi's servers is encrypted using TLS 1.3 with a 256-bit SSL certificate. This ensures no third party can intercept or read your data in transit.
• Storage Encryption: Sensitive data such as passwords, identification details, and financial information are stored in encrypted form in our database. Your password is stored as a hash that cannot be decrypted by anyone, including BigBossJudi staff.
• Access Controls: Access to player data within BigBossJudi's internal systems is restricted on a least-privilege basis — staff only have access to the data required to carry out their specific job responsibilities.
• 24/7 Monitoring: Our systems are continuously monitored to detect any unauthorised access attempts, traffic anomalies, or indicators of cyberattack. Any incidents are addressed promptly by our security team.
• Periodic Security Audits: BigBossJudi undergoes regular penetration testing and independent security audits by third-party experts to identify and address vulnerabilities before they can be exploited.

Data Retention Period:

• Active account data is retained for the duration your account remains active and for the period required by law following account closure.
• Financial transaction records are retained for a minimum of 5 years to comply with anti-money laundering legislation.
• Customer support communication logs are retained for 2 years for reference and dispute resolution purposes.
• Cookie and session data is deleted once the session ends or after a maximum period of 12 months.

BigBossJudi does not sell players' personal data. However, there are limited circumstances where sharing data with certain parties is necessary for platform operations or legal compliance. Each of these circumstances is clearly explained below.

• Payment Processing Providers: To process your deposits and withdrawals via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX, BigBossJudi shares the necessary information (name and transaction reference) with the relevant payment provider. These providers have their own privacy policies and are subject to Malaysian financial regulations.
• Game Providers: To enable you to play games from Pragmatic Play, Evolution Gaming, Habanero, and other providers, limited game session data (such as player ID and bet values) is shared with the relevant providers for technical purposes only.
• Technical Service Providers: BigBossJudi works with trusted third-party service providers for server hosting, email delivery, and other technical support. These providers are bound by strict data protection agreements and may only use your data for specified purposes.
• Relevant Authorities: BigBossJudi will disclose player information to law enforcement authorities, regulatory bodies, or courts where required by law, court order, or in the context of a legitimate criminal investigation. We have no legal basis to refuse disclosure in such circumstances.
• Identity Verification Service: For KYC (Know Your Customer) purposes, BigBossJudi may engage licensed third-party identity verification services. Information shared is limited strictly to what is required for verification.

BigBossJudi does not share players' personal data with marketing companies, data brokers, or any party for advertising purposes without your explicit consent. This is a non-negotiable commitment.

BigBossJudi uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device by your web browser when you visit our platform.

You can manage cookie settings through your web browser. However, disabling necessary cookies may affect platform functionality — such as being unable to stay logged in during a gaming session. Analytics and preference cookies are entirely optional and can be disabled without affecting BigBossJudi's core functionality.

As a BigBossJudi player, you have certain rights regarding your personal data. BigBossJudi respects these rights and provides a clear process for you to exercise them.

• Right of Access: You have the right to request a copy of all personal data we hold about you. We will provide this information in a readable format within 14 working days of your request.
• Right to Rectification: If you find that the personal information we hold about you is inaccurate or outdated, you have the right to request a correction. Basic details such as your phone number and email address can be updated directly in your account settings.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data — known as the "right to be forgotten". However, this right is subject to legal retention requirements (such as financial transaction records that must be kept for 5 years) and the requirements of any unresolved dispute resolution processes.
• Right to Restrict Processing: You may request that BigBossJudi restrict the processing of your data in certain circumstances — for example, while we are reviewing your correction request.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes. Once your objection is received, we will stop sending you marketing communications immediately.
• Data Portability Right: You have the right to request your personal data in a structured, machine-readable format for transfer to another service provider.

To exercise any of the rights above, please contact the BigBossJudi privacy team by email at support@bigbossjudi.click with the subject line "Privacy Rights Request" and state the right you wish to exercise along with your account details for identity verification. We will respond within 3 working days with a confirmation of receipt and an estimated timeline for resolution.

BigBossJudi strictly prohibits individuals under the age of 18 from accessing any of our services. This platform is exclusively for adults.

BigBossJudi does not knowingly collect, store, or process any personal information from individuals under the age of 18. All registration processes require date of birth verification, and any account suspected of being registered by a minor will be blocked immediately.

If you are a parent or guardian and believe your child under the age of 18 has successfully registered a BigBossJudi account or has been using an adult account without authorisation, please contact us immediately at support@bigbossjudi.click. We will investigate promptly and take appropriate action, including closing the account in question and returning any related balance.

In the course of BigBossJudi's platform operations, some player data may be processed or stored on servers located outside Malaysia — for example, by technical service providers or game providers operating internationally.

BigBossJudi ensures that any such data transfers are carried out with adequate safeguards. This means we only deal with third parties that:

• Operating in jurisdictions with equivalent or higher data protection standards
• Have signed data processing agreements obligating them to protect your data to the same standards we uphold
• Holds internationally recognised security certifications

BigBossJudi does not transfer data to parties in countries that lack adequate data protection standards without appropriate additional safeguards in place.

The BigBossJudi platform may contain links or integrations to third-party services — such as eWallet providers like Touch 'n Go or GrabPay when you make a deposit. BigBossJudi's Privacy Policy does not apply to those third-party platforms or services.

When you leave the BigBossJudi platform and use third-party services — including during payment processing via Touch 'n Go, GrabPay, Boost, ShopeePay, or your bank's FPX portal — the privacy practices of those platforms apply to any information you provide to them. We recommend reading the privacy policy of any third-party platform before using it.

BigBossJudi is not responsible for the privacy practices or content of any third-party platform, even where links to such platforms appear within BigBossJudi.

BigBossJudi reserves the right to amend, update, or modify this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or improvements to how we protect your data.

For material amendments — that is, changes that could significantly affect your privacy rights — BigBossJudi will notify players via:

• Email notification to your registered address at least 7 days before the effective date
• A prominent notice within the platform the next time you log in
• Update the "Last Updated" date at the top of this document

Continued use of the BigBossJudi platform after an amendment takes effect constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the option to close your account and discontinue use of the platform before the effective date.

We recommend reviewing this page periodically to stay informed on how BigBossJudi handles your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or how BigBossJudi handles your personal data, our team is ready to assist through the following channels:

• Privacy Email: support@bigbossjudi.click — use the subject line "Privacy Inquiry" or "Privacy Rights Request" to speed up your response
• Live Chat: Available 24 hours a day within the BigBossJudi platform — for general privacy enquiries
• Response Time: Email inquiries are answered within 4 hours for urgent issues and 24 hours for general queries

We are committed to addressing every privacy concern seriously and providing clear explanations and satisfactory resolutions within a reasonable timeframe. Your trust is BigBossJudi's top priority.