Privacy Policy boda8 – Our Commitment to Protecting the Personal Data of Malaysian Players

Boda8 ("we", "Platform", or "boda8") operates through the website boda8.best and provides digital entertainment services to players in Malaysia, covering online slots, Live Casino, digital lottery, Sports Betting, and e-sports. We understand that player trust is the foundation of every relationship we build, and that trust begins with responsible and transparent handling of personal data.

This Privacy Policy applies to all personal information collected, processed, or stored by boda8 in connection with:

• Player registration and account management
• Processing of deposits and financial withdrawals
• Access to all games and services within the boda8 platform
• Communications between players and the boda8 support team
• Participation in boda8's promotions, bonus, and VIP programmes
• General use of the boda8.best website, including browsing without a registered account

Boda8 is fully committed to ensuring that every player's data privacy is respected and protected in line with internationally recognised standards. We have never regarded players' personal data as a tradeable business asset — it is personal information you have entrusted to us for specific and limited purposes.

Boda8 collects various types of personal data depending on how you interact with our platform. Below is a complete list of the data categories we may collect:

Boda8 does not collect any data that is unnecessary or irrelevant to the provision of our services. Data minimisation is a core principle in how we handle player information.

Your personal data is collected by boda8 through several different channels, depending on how you interact with our platform:

• Account Registration: When you register a new boda8 account, you provide basic information — such as your name, phone number, date of birth, and payment account details — directly through the registration form on the platform.
• Identity Verification: When boda8 requires identity verification — particularly for large withdrawal amounts or compliance requirements — you may be asked to submit identification documents such as a copy of your MyKad or a recent bank statement.
• Financial Transactions: Each time you make a deposit via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u, CIMB Clicks, or any other method, transaction information is automatically collected by boda8's systems for record-keeping and security purposes.
• Platform Usage: Technical and usage data is collected automatically as you browse boda8.best or use any of the games and services on the platform. This includes your IP address, device type, web browser, and activity logs.
• Support Communications: When you contact the boda8 support team via live chat or email, conversation records are retained for reference and service improvement purposes.
• Cookies & Similar Technologies: boda8 uses cookies and similar tracking technologies to enhance your experience on the platform. Further details about cookies are covered in Section 9 of this policy.

Boda8 uses the personal data collected solely for the purposes stated below. We do not use your data for any other purpose without your explicit consent:

• Service Provision: To create and manage your boda8 account, process deposits and withdrawals, and enable access to all games and platform services.
• Identity Verification: To verify your identity in order to meet compliance requirements related to anti-money laundering and applicable regulatory obligations.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, multi-account usage, bonus abuse, and other security threats to the boda8 platform and our players.
• Service Communications: To contact you regarding your account status, transactions, important security updates, and changes to terms that require your attention.
• Customer Support: To enable the boda8 support team to assist you effectively whenever you encounter any issues or enquiries related to your account or the platform.
• Platform Enhancement: To analyse usage patterns on an aggregate (not individual) basis, helping us continuously improve the performance, design, and features of the boda8 platform.
• Responsible Gaming: To monitor gameplay patterns and provide support to players who may need assistance with managing their gaming activity.
• Promotional Communications: To keep you informed about relevant boda8 bonus offers, promotions, and VIP programmes — only if you have consented to receive marketing communications.

Boda8 does not sell, rent, or disclose players' personal data to third parties for commercial marketing purposes under any circumstances. This is an absolute policy with no exceptions.

However, there are limited situations where boda8 may need to share certain data with carefully selected third parties:

• Payment Service Providers: To process your deposits and withdrawals via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u, or CIMB Clicks, the minimum required transaction information is shared with the relevant payment service provider. These providers are bound by strict confidentiality agreements with boda8.
• Game Providers: Third-party game providers partnered with boda8 may receive the minimum technical data required to deliver games to you. Any shared data is limited to session identifiers and contains no personally identifiable information that could directly identify you.
• Legal Authorities: boda8 is obligated to comply with lawful legal directives issued by the relevant authorities. Should a court or competent authority issue a valid order to obtain specific player data, boda8 will comply in accordance with the procedures prescribed under Malaysian law.
• Professional Advisors: In highly limited situations such as legal investigations or financial audits, legal counsel or accountants may be granted access to the minimum data required to carry out their professional duties, all of whom are bound by professional confidentiality obligations.

Player data security is boda8's highest technical priority. We continually invest in the latest security infrastructure to ensure your data is protected at every stage of processing:

• 256-bit SSL Encryption: All communications between your device and boda8's servers are encrypted using 256-bit Secure Socket Layer (SSL) — the same encryption standard used by Malaysia's leading banking and financial institutions to protect online transactions.
• Static Data Encryption: Personal data stored in boda8's databases is encrypted using robust encryption algorithms. Sensitive information such as passwords is stored in a one-way hashed format that cannot be decrypted by anyone, including boda8 staff.
• Layered Access Controls: Only boda8 staff with a clear, need-to-know business requirement are granted access to player data. All access is logged and monitored by boda8's security systems.
• Periodic Security Audits: boda8's security infrastructure undergoes periodic independent audits conducted by third-party cybersecurity experts. Audit findings are used to continuously strengthen our systems.
• Real-Time Threat Monitoring: boda8's security monitoring system operates around the clock to detect and promptly respond to any unauthorised access attempts, cyberattacks, or other security threats.
• Physical Infrastructure Protection: boda8 servers are hosted in top-tier data centres with strict physical security controls, including restricted access, continuous surveillance, and disaster recovery systems.

While boda8 takes every reasonable measure to protect your data, no system can guarantee 100% absolute security. We are committed to notifying you promptly in the event of any data breach involving your personal information, as described in Section 11.

Boda8 retains your personal data only for as long as necessary to fulfil the purposes set out in this policy, or as required by applicable law:

• Active Account Data: For as long as your boda8 account remains active and you continue to use the platform.
• Closed Account Data: After account closure, boda8 retains basic records for a minimum of 5 years to meet legal compliance requirements related to anti-money laundering and financial record-keeping.
• Financial Transaction Records: Records of all deposits and withdrawals are retained for a minimum of 7 years in accordance with Malaysian accounting law requirements.
• Support Communication Records: All live chat conversations and support email exchanges are retained for 2 years for reference and service improvement purposes.
• Technical Data & Logs: Technical logs and anonymised usage data are retained for 12 months for security and performance analysis purposes.

As a boda8 player, you have clear rights regarding the personal data boda8 holds about you. We respect and facilitate the exercise of all the following rights:

• Right to Access: You have the right to request a copy of all personal data that boda8 holds in relation to your account. Access requests will be processed within 14 business days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. Basic details such as your phone number and email address can be updated directly from your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data when it is no longer required for the purpose it was originally collected, provided there is no legal obligation that prevents such deletion.
• Right to Restrict Processing: In certain circumstances, you have the right to request that boda8 restrict how we process your data while a dispute is being resolved or information is being verified.
• Right to Object: You have the right to object to the use of your data for marketing communications. You may opt out of boda8 marketing communications at any time through your account settings or by contacting support.
• Right to Data Portability: You have the right to request a copy of your personal data in a machine-readable format for the purpose of transferring it to another platform, to the extent permitted by law.

To exercise any of the rights above, please contact the boda8 Privacy Officer by email at support@boda8.best with the subject line "Privacy Rights Request", along with verification of your identity. We are committed to responding to every request within the timeframe required by applicable law.

Boda8 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you browse boda8.best.

Types of cookies we use:

• Essential Cookies (Required): These cookies are required for the boda8 platform to function properly — including maintaining your login session, remembering account preferences, and enabling security features. They cannot be disabled as they are essential to platform operation.
• Functional Cookies (Optional): These cookies remember your preferences — such as interface language, favourite games, and display settings — to provide a more personalised experience on your next visit to the boda8 platform.
• Analytics Cookies (Optional): These cookies help us understand, on an aggregate level, how players use the boda8 platform — such as the most frequently visited pages and general navigation patterns. This information is used to improve platform design and performance. The data does not identify you individually.
• Security Cookies (Required): This cookie is used by boda8's fraud prevention system to detect suspicious activity and protect your account from unauthorised access.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the boda8 platform and your gaming experience. Cookie settings can be adjusted via the "Settings" or "Preferences" menu in your web browser.

The boda8 platform is for users aged 18 and above only only. boda8 does not knowingly collect, process, or store any personal data from individuals under the age of 18.

Should boda8 discover that personal data belonging to an individual under the age of 18 has been collected inadvertently, we will take immediate action to:

• Suspending and closing the relevant account immediately
• Delete all related personal data as promptly as possible following secure disposal procedures
• Returning any remaining financial balance in accordance with established procedures

Parents or guardians who have concerns about the use of the boda8 platform by a minor in their care are encouraged to contact the boda8 support team immediately at support@boda8.best.

While boda8 takes all reasonable steps to prevent data breaches, we also have comprehensive response procedures in place should a security incident occur:

• Tracking & Assessment: boda8's monitoring system will detect any data breach, and our security team will promptly assess the scope and impact of the incident.
• Containment: Immediate steps will be taken to contain the breach and prevent any further data exposure.
• Player Notification: If a data breach involves your personal information and poses a potential risk to your rights and freedoms, boda8 will notify you within 72 hours after the breach has been confirmed, via the email address registered to your account and/or through an in-platform notification.
• Authority Notification: boda8 will notify the relevant authorities in accordance with applicable legal requirements.
• Recovery & Improvement: Once the incident has been resolved, boda8 will conduct a thorough root-cause analysis and implement the necessary preventive measures to avoid a recurrence in the future.

Boda8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in how we handle data, changes in applicable law, or improvements to our data protection practices.

When material amendments are made to this policy, boda8 will notify players via:

• Clear in-platform notifications on boda8 after login
• Notification email sent to the address registered on your account
• Update the "Last Updated" date at the top of this page

Continued use of the boda8 platform after the effective date of any amendment constitutes acceptance of the updated policy. We encourage you to review this Privacy Policy page periodically to stay informed about how we protect your personal data.

A version history of boda8's Privacy Policy is available upon request. Please contact our support team if you wish to refer to an earlier version of the policy for any specific purpose.

If you have any questions, concerns, or complaints regarding how boda8 handles your personal data, or if you wish to exercise any of your privacy rights, please reach out to us through the following channels:

• Privacy Email: support@boda8.best (include "Privacy Enquiry" in the email subject line)
• Live Chat: Available 24 hours a day, 7 days a week, directly from the boda8 platform

The boda8 privacy team is committed to responding to all privacy-related enquiries within 7 working days. For more complex requests — such as data access requests or account deletion — a more thorough process may take up to 30 working days, and we will keep you updated on progress throughout that period.