Privacy Policy Bosjoko — Your Personal Data Protection

Bosjoko ("we", "Platform") values the privacy of every member who registers and uses our services. This Privacy Policy explains in detail how we collect, process, store, and protect your personal information when you use the website bosjoko.vu as well as our official mobile app.

This document applies to all users of the Bosjoko platform, including website visitors, prospective members in the registration process, active registered members, and former members whose personal data is still retained within the period prescribed by law.

This policy is drafted in compliance with Malaysia's Personal Data Protection Act (PDPA) 2010 and international privacy standards. We are committed to keeping this policy updated to reflect changes in law, technology, and industry best practices. The latest update date is always displayed at the top of this document.

Bosjoko collects various types of personal information depending on how you interact with our platform. Below is a summary of the data we collect:

We only collect data that is strictly necessary to provide our services, meet legal requirements, and ensure platform security. We do not collect sensitive data such as health information or religious beliefs unless specifically required by law.

Every piece of data we collect is used for legitimate and transparent purposes. The following are the primary purposes for which your personal data is used on the bosjoko platform:

• Account management: Creating and managing your member account, processing registration, and verifying identity through the required KYC process.
• Transaction processing: Processing deposits, withdrawals, and bonus payments securely and efficiently using your chosen payment method.
• Platform security: Detecting and preventing fraud, money laundering, multiple account ownership, and any other illegal activity on the platform.
• Service improvement: Analyzing usage patterns to improve the gaming experience, platform speed, and customer support service quality.
• Service communications: Sending important notifications relating to your account, transactions, security updates, and changes to terms of service.
• Marketing (with consent): Sending promotional offers, bonus information, and platform updates to members who have given consent to receive marketing communications.
• Legal compliance: Fulfilling legal obligations under PDPA, anti-money laundering (AML) regulations, and regulatory body requirements.

Bosjoko will not use your data for any purposes beyond those stated above without first obtaining your explicit consent.

Bosjoko does not sell, rent, or disclose members' personal information to third parties for commercial marketing purposes. However, in certain limited situations, we may share your data with the following parties:

• Payment service providers: Required transaction information is shared with trusted payment processors to enable deposits and withdrawals to be processed securely. All such providers are bound by strict confidentiality agreements.
• Game software providers: Minimum technical data required to ensure smooth gameplay and the validity of game results is shared with our licensed game providers.
• Regulatory authorities: We will disclose information lawfully requested by government authorities, courts, or relevant regulatory bodies when required by law.
• Fraud investigation: In cases of suspected fraud or money laundering, we reserve the right to share relevant information with law enforcement agencies.

Bosjoko implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or accidental destruction.

Key security measures we have implemented include:

• End-to-end data encryption: All data in transit is protected with SSL/TLS 256-bit encryption. Sensitive data at rest is also encrypted using AES-256 encryption algorithms.
• Strict access controls: Only authorised personnel with a legitimate work requirement may access members' personal data. All access is logged and monitored on a regular basis.
• 24/7 Monitoring: Intrusion detection systems (IDS) and multi-layered firewalls monitor our infrastructure around the clock to detect and prevent security threats.
• Regular security audits: We conduct regular penetration testing and security audits carried out by qualified independent cybersecurity firms.
• Data backup: Data is automatically backed up and stored in a secure location to ensure service continuity in the event of any technical incident.

In the event of a data breach that may affect your rights or freedoms, we are committed to notifying you and the relevant authorities within the timeframe required by applicable law.

The bosjoko platform uses cookies and similar tracking technologies to enhance the user experience, understand how the platform is used, and deliver more relevant content to you.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session verification, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting anonymous information about how members use our platform, including the most frequently visited pages and time spent, to help us improve the platform.
• Functional Cookies: Saving your preferences such as language, time zone, and display settings to provide a more personalized experience.
• Analytics Cookies: We use first-party analytics tools to understand aggregated, anonymized usage patterns for platform improvement purposes.

You may manage or disable cookies through your web browser settings at any time. Please note, however, that disabling essential cookies may affect the functionality and security of your login session on the Bosjoko platform.

Under Malaysia's Personal Data Protection Act (PDPA) and Bosjoko's internal policies, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the bosjoko customer support team via Live Chat or email. We will process your request within 30 days of receipt, subject to the required identity verification.

Bosjoko retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law.

• Active account data: Retained for as long as your account is active and for a reasonable period after account closure for customer support purposes.
• Financial records and transactions: Retained for a minimum of 7 years in accordance with Malaysia's taxation and anti-money laundering legal requirements.
• KYC records and identity verification: Retained for 5 years after the business relationship ends, in line with regulatory compliance requirements.
• Support communication logs: Retained for 2 years for quality control and historical reference purposes.
• Analytics data: Anonymous usage data is retained indefinitely as it cannot be identified as belonging to any specific individual.

Once the retention period expires, your personal data will be securely deleted or anonymised in accordance with industry-standard information security procedures.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, we encourage you to contact us directly in the first instance.

We have a dedicated customer support team ready to help you resolve any privacy-related issues quickly and effectively. You can reach us through:

• Live Chat: Available 24 hours a day, 7 days a week directly from the bosjoko platform — the fastest way to get an immediate response.
• Support Email: [email protected] — for written enquiries requiring a detailed response within 24 working hours.
• FAQ Section: Browse FAQ page for answers to frequently asked questions about privacy and account security.

If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Personal Data Protection Commissioner or the relevant regulatory body in your jurisdiction.

Bosjoko is committed to addressing all privacy complaints seriously and within a reasonable timeframe. We value your trust and will always strive to maintain the highest privacy standards across all aspects of our operations.