BigBosJudi Privacy Policy

1Introduction

BigBosJudi ("we", "us", "our", or "the Platform") is committed to handling personal information with transparency and care. This Privacy Policy describes how BigBosJudi collects, uses, shares, stores, and protects personal data belonging to registered members, prospective members, and website visitors ("you", "your", "data subject").

This Policy should be read alongside the Terms & Conditions and the Responsible Gambling information. By registering an account, making a deposit via Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, or any other available payment method, placing a wager, or otherwise interacting with BigBosJudi, you acknowledge that you have read and understood this Policy.

If you do not accept the practices described here, please discontinue use of the platform and contact support to request account closure.

2Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• Personal Data — any information that relates to an identified or identifiable natural person, including name, identification number, contact details, financial data, device identifiers, and behavioural records.
• Processing — any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, restriction, erasure, or destruction.
• Controller — the entity that determines the purposes and means of processing personal data. BigBosJudi acts as the controller for data collected on this platform.
• Processor — a third party that processes personal data on behalf of and under the instruction of the Controller.
• KYC — Know Your Customer checks, comprising identity verification, age confirmation, proof-of-address review, payment ownership confirmation, and source-of-funds assessment.
• Cookie — a small file stored on a device by a web browser at the instruction of a website, used to retain session information and usage statistics.

3Data We Collect

BigBosJudi collects personal data through the following channels:

3.1 Data you provide directly

• Full legal name, date of birth, gender, and nationality.
• Residential address — including city (e.g., Kuala Lumpur, Petaling Jaya, Shah Alam, Johor Bahru, Penang) and postcode.
• Mobile phone number and email address.
• Malaysian identity card number or passport number submitted for KYC verification.
• Bank account details, e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), or digital asset wallet addresses used for deposits and withdrawals.
• Copies of identity documents, proof-of-address documents, and selfies uploaded through the verification portal.
• Support correspondence, complaints, and enquiries submitted to our team.

3.2 Data collected automatically

• IP address, device type, operating system, and browser version.
• Login timestamps, session durations, and geographic region inferred from network data.
• Pages visited, game sessions initiated or completed, wagers placed, and promotional interactions.
• Cookie and similar tracking data as described in Section 5.

3.3 Data received from third parties

• Identity verification results and fraud-risk scores from licensed KYC and anti-money-laundering service providers.
• Transaction confirmation and failure codes from payment networks including FPX, DuitNow, Maybank, CIMB, and Public Bank.
• Sanctions and politically-exposed-person screening results from compliance data services.
• Responsible gambling self-exclusion records received from recognised gambling protection registries where applicable.

4Lawful Basis and Purpose of Processing

Each category of processing carried out by BigBosJudi rests on one or more recognised lawful bases. The primary purposes are summarised below:

Where BigBosJudi relies on legitimate interests as the basis for processing, a balancing test is conducted to confirm that the interest is not overridden by the data subject's own rights and expectations. You may request details of that assessment by contacting support.

5Cookies and Tracking Technologies

BigBosJudi uses cookies and similar technologies (local storage, session tokens, pixel tags) to maintain platform functionality, measure performance, and detect fraud. Cookie categories include:

5.1 Strictly necessary cookies

These cookies enable core functions such as user login sessions, security tokens, language preferences, and CSRF protection. The platform cannot operate correctly without them. No consent is required for their use because they are technically essential.

5.2 Analytical and performance cookies

We collect aggregated data about page load times, game session completion rates, checkout drop-off points, and navigation paths to improve platform reliability and speed. Individual-level data is not shared with advertising networks.

5.3 Security and fraud-detection signals

Device fingerprinting and behavioural analytics are used by our fraud-prevention systems to detect duplicate accounts, automated scripts, and suspicious login patterns. These signals are processed on a need-to-know basis and are not used for advertising profiling.

Most modern browsers allow you to manage or block cookies through their settings. Blocking strictly necessary cookies will impair account functionality, including login and payment processing. Analytical and security signals may still be processed through server-side mechanisms where technically required.

6Data Sharing and Disclosure

BigBosJudi does not sell personal data. Data is shared with third parties only in the categories and circumstances described below.

6.1 Payment processors and e-wallet operators

To process deposits and withdrawals, BigBosJudi shares transactional and identity data with payment networks including FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost, GrabPay, and digital asset settlement partners. Each processor operates under its own privacy terms and applicable financial regulations.

6.2 Identity verification and compliance service providers

Licensed KYC, anti-money-laundering, and sanctions-screening providers may receive copies of identity documents, facial images, and address proofs to complete verification checks. These providers are contractually bound to use data solely for the verification purposes specified and not for any secondary commercial activity.

6.3 Game software providers

Wager history, game session identifiers, and account standing may be shared with game software providers where technically necessary to deliver game content, calculate results, resolve disputes, or confirm bonus eligibility. Providers receive a limited data set and are not authorised to use player data independently.

6.4 Law enforcement and regulatory bodies

BigBosJudi will disclose personal data to law enforcement, competent courts, or regulatory authorities where required by a valid legal obligation, court order, or regulatory instruction. Where permitted by law, BigBosJudi will notify the affected account holder before or after such disclosure.

6.5 Business transfers

In the event of a merger, acquisition, or transfer of platform assets, player data may be transferred as part of the transaction. Affected players will be notified before their data becomes subject to a materially different privacy policy.

7International Data Transfers

BigBosJudi's platform infrastructure, service providers, and game studios may be located outside Malaysia. Personal data may therefore be transferred to and processed in countries with different data protection frameworks to those applicable in Malaysia.

Where such transfers occur, BigBosJudi implements appropriate safeguards including contractual data protection clauses, vendor security assessments, and access controls to maintain protections that are substantially equivalent to the standards described in this Policy. You may request information about the specific safeguards applied to a transfer by contacting support.

8Security Measures

BigBosJudi applies layered technical and organisational controls to protect personal data against unauthorised access, disclosure, alteration, or destruction. Measures include:

• TLS 1.2 or higher encryption on all connections between your device and our servers.
• Password hashing using recognised cryptographic algorithms; plain-text password storage is prohibited.
• Identity documents stored in encrypted form with access restricted to authorised compliance personnel.
• Multi-factor authentication requirements for administrative system access.
• Regular vulnerability assessments and penetration testing of platform infrastructure.
• Logging and monitoring of privileged access actions and sensitive data queries.
• Staff training on data handling responsibilities and incident response obligations.

Despite these controls, no internet-connected system can guarantee absolute security. If you believe your account credentials or personal data have been compromised, you must contact BigBosJudi support immediately and change your password from a secure device.

9Your Rights as a Data Subject

Subject to applicable law, you hold the following rights in respect of personal data processed by BigBosJudi. To exercise any right, contact support with your registered account username and a clear description of the request.

Requests will ordinarily be acknowledged within five working days and substantively responded to within thirty days. Where a request is complex or where a high volume of requests is received, the response period may be extended by a further thirty days with prior notice provided to you.

10Retention of Personal Data

BigBosJudi retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, unless a longer period is required by law, regulatory guidance, or a legitimate operational need such as an unresolved dispute.

As a general principle, active account data is retained for the lifetime of the account plus a period of five years following account closure, to satisfy anti-money-laundering record-keeping requirements and to enable dispute investigation. Financial transaction records may be retained for up to seven years in line with standard financial compliance obligations.

Support correspondence is typically retained for three years from the date of the interaction. Security and fraud-detection logs are retained for up to twelve months in operational form, after which they may be archived in anonymised or aggregated format for statistical analysis.

When a retention period expires, personal data is deleted from active systems and purged from backup infrastructure within a defined maintenance cycle. Where deletion is not technically feasible within the current cycle, the data is isolated and restricted from further processing until scheduled deletion occurs.

11Minors and Age Restriction

BigBosJudi is strictly a 21-and-above platform. We do not knowingly collect, store, or process personal data from persons under the age of 21. Account registration requires a declaration of age and may be accompanied by a request for documentary evidence.

If BigBosJudi becomes aware or has reasonable grounds to suspect that an account has been registered by or on behalf of a person under 21, the account will be suspended immediately pending investigation. Any funds held in the account will be dealt with in accordance with applicable legal obligations and the BigBosJudi Terms & Conditions.

12Changes to This Privacy Policy

BigBosJudi may update this Privacy Policy to reflect changes in legal requirements, platform features, payment methods, or operational practices. The effective date at the top of the page will be updated whenever a material revision is published.

For material changes that significantly affect your rights or how your data is used, BigBosJudi will provide advance notice through a platform notification or to the email address registered on your account. Continued use of BigBosJudi after the notified effective date constitutes acceptance of the revised Policy.

You are encouraged to review this page periodically. Archived versions of the Policy are available on request through the support team.

13Contact Us

For privacy-related enquiries, data subject rights requests, complaints, or general questions about how BigBosJudi handles personal data, please contact the support team through the live chat function available on the platform or by email.

The support email address is displayed as plain, non-clickable text in the footer of every page on this website. Please include your registered account username, the nature of your enquiry, and any relevant dates or transaction references so that your request can be handled efficiently.

If you are not satisfied with the response received, you may also consult the general guidance available on our FAQ page or escalate the matter through the dispute resolution process described in the Terms & Conditions.