boda8my2 Privacy Policy — How We Handle Your Data

1Introduction

This Privacy Policy ("Policy") is published by boda8my2 ("boda8my2," "we," "our," or "us"), the operator of the online gaming platform accessible at boda8my2.org. This Policy describes how boda8my2 collects, uses, discloses, stores, and protects personal data obtained from individuals who register for or access the boda8my2 Platform ("Members," "Users," or "you").

By registering an account with boda8my2 or by continuing to access the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must not register or continue to use the Platform.

This Policy should be read alongside the boda8my2 Terms & Conditions, which govern the overall relationship between boda8my2 and its Members. In the event of any inconsistency between this Policy and the Terms & Conditions on a data protection matter, this Policy shall prevail.

2Who We Are (Data Controller)

boda8my2 is the data controller in respect of personal data collected through the boda8my2 Platform. As data controller, boda8my2 determines the purposes and means by which your personal data is processed.

boda8my2 operates under an international gaming licence and is subject to the data protection and privacy requirements imposed by its licensing authority, as well as applicable data protection laws. For all data-related enquiries, Members may contact boda8my2 at: [email protected].

3Personal Data We Collect

boda8my2 collects the following categories of personal data, depending on the nature of your interaction with the Platform:

boda8my2 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, or health data, except where expressly required by responsible gaming obligations (for example, recording self-exclusion requests for Member protection purposes).

4How We Collect Your Data

boda8my2 collects your personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions;
• Automated collection: Technical data such as IP address, device identifiers, and session data collected automatically when you access the Platform;
• Third-party sources: Identity verification and fraud screening data from licensed KYC and AML service providers; payment confirmation data from payment processors including Touch 'n Go, DuitNow, FPX, and Malaysian bank payment gateways;
• Cookies and tracking technologies: As described in Section 8 of this Policy.

5Legal Bases for Processing

boda8my2 processes your personal data under the following legal bases:

• Contractual necessity: Processing required to fulfil our agreement with you under the boda8my2 Terms & Conditions — including account management, game provision, and financial transaction processing;
• Legal obligation: Processing necessary to comply with our regulatory and licensing obligations, including anti-money laundering (AML), Know Your Customer (KYC), and responsible gaming requirements;
• Legitimate interests: Processing for fraud detection, platform security, and service improvement, where our interests do not override your fundamental rights;
• Consent: Processing for optional purposes such as marketing communications, where you have provided explicit consent. You may withdraw consent at any time by contacting [email protected].

6How We Use Your Data

boda8my2 uses your personal data for the following purposes:

• To create, verify, and manage your boda8my2 account;
• To process MYR deposits and withdrawals and maintain accurate financial records;
• To verify your identity and age in compliance with our licensing and AML obligations;
• To provide, personalise, and improve the boda8my2 gaming experience;
• To detect and prevent fraudulent activity, account abuse, and prohibited conduct as described in the Terms & Conditions;
• To administer and monitor responsible gaming tools including deposit limits, self-exclusion, and session controls;
• To communicate with you regarding your account, security alerts, and support requests;
• To send promotional communications where you have consented to receive them;
• To comply with applicable laws, court orders, and regulatory requirements.

7Data Sharing & Third Parties

boda8my2 does not sell your personal data. We share your data with third parties only in the following circumstances and to the minimum extent necessary:

• Payment processors: Your financial transaction data is shared with licensed payment service providers (including Touch 'n Go, Boost, GrabPay, DuitNow, and Malaysian bank FPX gateways) solely for the purpose of processing deposits and withdrawals;
• Identity and KYC verification providers: Your identity documents and related data may be shared with licensed third-party verification services to fulfil our AML and age verification obligations;
• Game software providers: Minimal technical data (session tokens, currency type) may be passed to licensed game providers (JiliBet, PG Soft, Pragmatic Play, etc.) for game operation purposes. These providers do not receive personally identifiable information unless required for jackpot prize fulfilment;
• Fraud detection platforms: Anonymised or pseudonymised technical data may be processed by fraud screening tools to identify suspicious patterns;
• Legal and regulatory authorities: boda8my2 will disclose personal data to law enforcement, regulatory bodies, or courts where required by law or in response to lawful requests;
• Business transfers: In the event of a merger, acquisition, or sale of assets, Member data may be transferred to the successor entity, subject to equivalent privacy protections.

All third-party service providers engaged by boda8my2 are contractually required to process data only for the specified purpose and in compliance with applicable data protection standards.

8Cookies & Tracking Technologies

boda8my2 uses cookies and similar tracking technologies on the Platform to enhance functionality, analyse usage patterns, and support security measures. The categories of cookies used by boda8my2 are as follows:

• Strictly necessary cookies: Required for the Platform to function — including session authentication cookies, security tokens, and load balancing. These cannot be disabled without rendering the Platform inoperable;
• Functional cookies: Remember your preferences such as language settings and notification preferences across sessions;
• Analytics cookies: Collect anonymised usage data to help boda8my2 understand how Members interact with the Platform and identify areas for improvement. No personally identifiable data is included in analytics reporting;
• Security cookies: Used by fraud detection systems to identify unusual activity patterns associated with your session.

You may control cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may significantly impair Platform functionality, including the ability to log in and maintain your session.

9Data Retention

boda8my2 retains personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with legal and regulatory obligations. The following indicative retention periods apply:

• Account and identity data: Retained for the duration of the Member's account and for a minimum of 5 years after account closure, in accordance with AML and gaming licence record-keeping requirements;
• Transaction records: Retained for a minimum of 5 years from the date of the transaction;
• KYC and verification documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later;
• Support communications: Retained for up to 3 years from the date of the interaction;
• Technical and usage data: Typically retained for 13 months for analytics purposes, then anonymised or deleted.

Following the expiry of applicable retention periods, boda8my2 will securely delete or anonymise personal data in accordance with its data management procedures.

10Your Data Rights

Subject to applicable law and boda8my2's regulatory obligations, you have the following rights in respect of your personal data:

• Right of access: You may request a copy of the personal data boda8my2 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data, subject to our legal retention obligations (particularly AML and gaming licence record-keeping requirements which may prevent full deletion during the retention period);
• Right to restrict processing: You may request that boda8my2 restrict processing of your data in certain circumstances;
• Right to object: You may object to processing based on legitimate interests;
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact boda8my2 at [email protected] with sufficient information to identify your account. boda8my2 will respond within a reasonable timeframe. In some cases, identity verification may be required before a request can be processed.

11Security Measures

boda8my2 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the boda8my2 Platform;
• Encryption of sensitive data stored on boda8my2 servers;
• Role-based access controls ensuring that only authorised personnel can access Member data;
• Regular security audits and penetration testing of Platform infrastructure;
• Two-factor authentication available to Members for account login;
• Fraud detection and anomaly monitoring systems operating in real time.

While boda8my2 takes all reasonable steps to protect your data, no system is entirely immune to security risks. You are encouraged to use a strong, unique password for your boda8my2 account and to enable two-factor authentication where possible. In the event of a security breach that is likely to result in a high risk to your rights, boda8my2 will notify affected Members in accordance with its legal obligations.

12Children's Privacy

If you have reason to believe that a person under 21 has registered for or accessed the boda8my2 Platform, please contact us immediately at [email protected] so that we can take appropriate action. Parents and guardians are encouraged to use parental control software to prevent underage access to online gambling platforms.

13Changes to This Policy

boda8my2 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, boda8my2 will update the "Last Updated" date at the top of this page. For significant changes affecting how we process your data, boda8my2 may provide additional notice via email to your registered address or via an in-platform notification.

Your continued use of the boda8my2 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree to the revised Policy, you must cease using the Platform and may request account closure.

14Contact Us

For any questions, requests, or concerns relating to this Privacy Policy or boda8my2's handling of your personal data, please contact us at:

Email: [email protected]

Our data protection team monitors this address and aims to respond to all privacy-related enquiries within 5 business days. For responsible gaming data requests — including self-exclusion records and session history — please also see our Responsible Gaming page for additional resources and contact options.

boda8my2 is committed to resolving all data privacy concerns fairly and promptly. If you are not satisfied with our response, you may have the right to escalate the matter to the relevant data protection authority in your jurisdiction.