boda88 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how boda88 ("boda88", "we", "us", "our") collects, processes, stores, and shares personal data in connection with your use of the boda88 website and online gaming platform (the "Platform"), accessible at boda88.app.

boda88 takes the privacy of its players seriously. We operate in accordance with applicable data protection legislation and are committed to handling your personal data lawfully, fairly, and transparently. This Policy is intended to give you a clear and honest picture of our data practices so that you can make informed decisions about your personal information.

By registering an account with boda88 or using the Platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not consent to this Policy, you should not access or use the Platform.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gaming Policy, both of which form part of the overall agreement between you and boda88.

2. Data Controller

boda88 is the data controller in respect of personal data collected through the Platform. As data controller, boda88 determines the purposes and means of the processing of your personal data and is responsible for ensuring that such processing is carried out in compliance with applicable law.

If you have any questions about how boda88 processes your personal data, or wish to exercise any of your data subject rights described in this Policy, you may contact our data protection team at: support@boda88.app

3. Personal Data We Collect

boda88 collects personal data from you in the following categories:

boda88 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data, except where expressly required by our responsible gaming obligations (for example, self-exclusion documentation).

4. How We Use Your Personal Data

boda88 uses the personal data we collect for the following purposes:

• Account management: Creating, maintaining, and administering your boda88 account, including processing your login authentication and account security;
• Identity verification: Conducting KYC checks to verify your identity and age, and to comply with anti-money laundering (AML) regulatory requirements;
• Payment processing: Processing deposits and withdrawals through your chosen Malaysian payment methods including Touch 'n Go eWallet, DuitNow, and bank transfers;
• Gaming operations: Enabling your access to casino games, sports betting, Toto 4D, and all other Platform services;
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour, applying deposit and loss limits, processing self-exclusion requests, and maintaining exclusion records;
• Customer support: Responding to your enquiries, resolving complaints, and providing technical assistance;
• Fraud prevention and security: Detecting and preventing fraudulent activity, bonus abuse, collusion, and other prohibited conduct;
• Regulatory compliance: Meeting our obligations under the terms of our gaming licence, applicable data protection law, and financial crime prevention regulations;
• Service improvement: Analysing platform usage patterns to improve the boda88 user experience, game offering, and technical performance;
• Marketing communications: Sending promotional offers, bonuses, and updates to players who have not opted out of marketing communications. You may unsubscribe at any time.

5. Legal Basis for Processing

boda88 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the agreement with you, including account management, gaming services, and payment processing;
• Legal obligation: Processing required to comply with applicable laws, including KYC/AML obligations under our gaming licence and applicable financial crime prevention frameworks;
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights;
• Consent: Processing for direct marketing purposes, where you have provided your consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Third Parties

boda88 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We may share your personal data with the following categories of recipients only where strictly necessary:

• Payment processors: Malaysian payment service providers (including FPX gateway operators, Touch 'n Go, Boost, GrabPay, and DuitNow) to facilitate your deposits and withdrawals;
• Game providers: Licensed game studios and content providers whose games are hosted on the boda88 Platform, to the extent necessary to provide gaming services;
• KYC/identity verification providers: Third-party identity verification services engaged to assist with document verification and age checks;
• Regulatory authorities: Gaming licensing bodies, financial intelligence units, or law enforcement agencies where disclosure is required by law or legal process;
• IT and infrastructure providers: Cloud hosting, security, and technical service providers engaged by boda88 under contractual data processing agreements;
• Responsible gaming organisations: Where you have self-excluded or where we are required to share information with industry self-exclusion schemes.

All third parties with whom boda88 shares personal data are required to handle such data in accordance with applicable data protection law and are bound by appropriate contractual data protection obligations.

7. Cookies & Tracking Technologies

boda88 uses cookies and similar tracking technologies on the Platform to provide core functionality, improve user experience, and support security operations. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function. These include session cookies that maintain your logged-in state and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, preferred game categories, and responsible gaming settings.
• Analytics cookies: Collect anonymised data about how players use the Platform to help us improve performance and identify technical issues. Data collected via analytics cookies does not identify you personally.
• Security and fraud prevention cookies: Help boda88 identify and prevent fraudulent access attempts, multiple account creation, and other prohibited activities.

You may manage cookie preferences through your browser settings. Note that disabling certain categories of cookies may impact the functionality of the boda88 Platform. Strictly necessary cookies cannot be disabled without significantly impairing your ability to use the service.

8. Data Retention

boda88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, regulatory, accounting, and reporting requirements.

As a general principle, boda88 retains personal data associated with active accounts for the duration of the account relationship. Following account closure, boda88 retains personal data for a minimum period of five (5) years in accordance with our obligations under applicable gaming licence conditions and anti-money laundering regulations.

KYC documentation is retained for the period required by applicable financial crime prevention regulations. Gaming activity data is retained to fulfil regulatory audit obligations. Marketing opt-out records are retained indefinitely to ensure that your preferences are respected.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with boda88's internal data disposal procedures.

9. Your Data Subject Rights

Depending on applicable data protection law, you may have the following rights in relation to your personal data held by boda88:

To exercise any of the rights listed above, please contact boda88 at: support@boda88.app. boda88 will respond to all data subject requests within 30 calendar days of receipt, or within any shorter period required by applicable law. In complex cases, this period may be extended by a further 30 days with prior notification.

Please note that certain rights are subject to exceptions and limitations. For example, boda88 may decline an erasure request where retention of the data is required to comply with a legal obligation or to establish, exercise, or defend legal claims.

10. Data Security

boda88 implements appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Security measures in place include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the boda88 Platform;
• Encryption of personal data at rest within boda88's database infrastructure;
• Role-based access controls restricting employee access to personal data on a need-to-know basis;
• Multi-factor authentication requirements for internal system access by boda88 personnel;
• Regular security assessments and penetration testing of Platform infrastructure;
• Formal data breach response procedures, including notification obligations to relevant authorities where required by applicable law.

Notwithstanding boda88's security measures, no method of electronic transmission or storage is 100% secure. In the event of a data breach affecting your personal data, boda88 will notify you and relevant regulatory authorities as required by applicable law.

11. Children and Minors

The boda88 Platform is strictly intended for persons aged 21 years and above. boda88 does not knowingly collect personal data from individuals below this age threshold. If boda88 becomes aware that personal data has been collected from a minor, such data will be deleted promptly and the associated account closed.

If you believe that a minor may have created a boda88 account, please contact us immediately at: support@boda88.app

12. Changes to This Privacy Policy

boda88 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. The date of the most recent revision is indicated at the top of this page.

Where material changes are made to this Policy that may affect your rights, boda88 will notify registered account holders via email or on-Platform notification prior to the changes taking effect. Your continued use of the Platform following such notification constitutes acceptance of the revised Policy.

We encourage you to review this Policy periodically to stay informed about how boda88 protects and uses your personal data.