Privacy Policy boda 8 — Protection of Malaysian Players' Personal Data

Welcome to the boda 8 Privacy Policy. This document explains in detail how the boda 8 platform, operating in https://boda8.biz ("boda 8", "we", or "the platform") collects, uses, stores, protects, and under certain circumstances discloses your personal information as a player ("you" or "User").

Boda 8 is fully committed to protecting the privacy of Malaysian players. This commitment goes beyond merely fulfilling legal requirements under the Personal Data Protection Act 2010 (PDPA) Malaysia — reflecting our core belief that player trust is the most valuable asset we hold.

By registering an account, accessing, or using any part of the boda 8 platform, you give your informed consent to the collection and use of your personal information in accordance with the terms set out in this Privacy Policy. If you do not agree with any part of this policy, we ask that you refrain from using the boda 8 platform.

Boda 8 follows a data minimisation principle — we only collect information that is strictly necessary to deliver a quality service to you. The following are the categories of data we may collect:

Your personal data is collected by boda 8 through several different channels, depending on how you interact with our platform:

Information You Provide Directly

• During the registration process for a new account at boda 8.
• When undergoing the identity verification (KYC) process, such as uploading a copy of your MyKad.
• When contacting the boda 8 customer support team via Live Chat or email.
• When completing feedback forms, customer satisfaction surveys, or promotional contests.
• When updating your account profile or payment information.

Automatically Collected Information

• Server log data recording IP addresses, access timestamps, and browsing activity.
• Cookies and similar tracking technologies when you browse the boda 8 platform.
• In-app analytics data from the SDK within the boda 8 mobile application (where applicable).
• Technical performance information for diagnosing and resolving platform issues.

Information from Third Parties

• Identity verification data from the third-party KYC service provider used by boda 8.
• Transaction data from payment providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX-participating banks including Maybank2u and CIMB Clicks.
• Fraud prevention information from third-party security service providers.

Boda 8 uses collected personal data only for clearly defined purposes. We do not use your data for any other purpose without your prior consent, except where required by law.

Boda 8 does not sell, rent, or trade your personal data to any third party for commercial purposes. However, there are limited situations where data sharing may be necessary:

Approved Service Providers

Boda 8 may share your personal data with trusted service providers who assist us in operating the platform. These include:

• Payment providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX processors — to complete financial transactions in RM.
• KYC providers: A licensed identity verification service that helps boda 8 meet its KYC requirements.
• Security provider: Fraud prevention and cybersecurity services to safeguard the platform.
• Game software provider: Game studios that supply casino games to boda 8 — only the minimum data required for game operation is shared.

All third-party service providers working with boda 8 are bound by strict data protection agreements and are not permitted to use your data for any other purpose.

Legally Mandated Disclosure

Boda 8 may disclose your personal data where required by Malaysian law, court order, or a lawful request from a government authority.

Boda 8 retains your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required under Malaysian law.

Data Retention Period

• Active account data: Retained for as long as your account remains active on boda 8.
• Closed account data: Data is retained for 7 years after account closure to meet legal compliance and audit requirements.
• Financial transaction records: Retained for 7 years in accordance with Malaysia's accounting and taxation legal requirements.
• Technical logs: Retained for 90 days unless an active investigation is ongoing.
• Support communication data: Retained for 2 years for reference and service improvement.

Technical Security Measures

• 256-bit SSL/TLS encryption for all data in transit.
• Sensitive data at rest is encrypted using AES-256 standards.
• Role-based access control — only staff who require access to the relevant data are authorised to do so.
• 24/7 security monitoring and intrusion detection systems.
• Regular security audits conducted by independent third parties.
• Established security incident response procedures.

The boda 8 platform uses cookies and similar tracking technologies to enhance your experience. Cookies are small text files stored on your device when you browse our platform.

You can manage cookies through your web browser settings. Please note that disabling essential cookies may affect the functionality of the boda 8 platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by boda 8. We are committed to respecting and facilitating the exercise of these rights.

The boda 8 platform not intended for individuals under the age of 21. We do not knowingly collect or process the personal data of any individual under the age of 21.

Should boda 8 become aware that personal data of anyone under the age of 21 has been collected without proper verification, we will take immediate steps to delete that data and close the account in question.

If you believe your child or any underage individual has registered an account on boda 8, please contact us immediately at support@boda8.biz so that we may take the appropriate action.

In operating the boda 8 platform, your personal data may be stored or processed on servers located outside Malaysia. This may occur when we use cloud services or technology providers that operate globally.

Every cross-border transfer of personal data is carried out with the following safeguards in place:

• Data is only transferred to countries or entities that provide a level of data protection equivalent to or greater than Malaysia's PDPA.
• Valid data transfer agreements are signed with all recipients of data outside Malaysia.
• End-to-end encryption is applied to all cross-border data transfers.

Boda 8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or new platform features.

When significant changes are made to this policy, boda 8 will:

• Updating the "Last Updated" date at the top of this document.
• Sending notifications to your registered email address or via in-platform notices on boda 8.
• In the event of significant material changes, we may request your renewed consent before the changes take effect.

We encourage you to review this Privacy Policy periodically. Your continued use of the boda 8 platform after any changes take effect constitutes acceptance of the updated version.

If you have any questions, concerns, or complaints about how boda 8 handles your personal data, we encourage you to reach out to us directly.

Please include "Privacy Enquiry" or "Data Complaint" in your subject line so your message can be routed directly to our privacy team. For complaints that cannot be resolved through us, you have the right to refer the matter to the relevant data protection authority in Malaysia.

For information on in-game protection and betting limits, visit the Responsible Gaming us. For general enquiries about the boda 8 platform, visit Frequently Asked Questions us.