Privacy Policy BigBoss888 – Our Commitment to Protecting Malaysian Players' Personal Data

Bigboss888 is an online casino and Sports Betting platform built exclusively for adult players in Malaysia. We understand that the trust of our players is our most valuable asset — and that trust begins with how we handle your personal information. This Privacy Policy is more than a legal formality; it is a genuine reflection of our commitment to transparency and accountability in data management.

In today's Malaysian context, where e-wallets such as Touch 'n Go and GrabPay are deeply embedded in everyday life and almost all financial transactions are conducted via smartphone, data security is more relevant and critical than ever. Malaysian players need confidence that when they register with BigBoss888, make deposits via DuitNow or FPX, and play slots or Live Casino, their information is in safe and responsible hands.

This Privacy Policy clearly explains what data we collect, why we need it, how we use it, who can access it, and what rights you have as the owner of that data. We are committed to never using your data for purposes you have not consented to, and to never selling or trading your personal information to third parties for commercial gain.

BigBoss888 collects personal data from members through several channels – during account registration, during platform use, through interactions with customer support, and automatically via tracking technologies. The following are the categories of data we collect:

Information you provide directly:

• Full name as per identification card.
• An active Malaysian phone number.
• Email address.
• Date of birth (for age verification – minimum 18 years old).
• E-wallet or bank account details for deposits and withdrawals (account name and account number only — not your password or PIN).
• Identity verification documents when required for the KYC (Know Your Customer) process.

Data collected automatically when you use the platform:

• IP address and device information (device type, operating system, web browser).
• Gaming activity data – games played, bet amounts, outcomes, session duration.
• Financial transaction records — all deposits and withdrawals, including date, time and amount.
• Interaction logs with customer support.
• Cookie data and similar tracking technologies (refer to Section 6).

Every piece of data collected by BigBoss888 used only for specific, legitimate purposes. We do not use your data for any other purpose without notifying you and obtaining your consent. The following outlines each purpose in detail:

For marketing purposes, you may withdraw your consent at any time by contacting the support team BigBoss888 or through your account settings. Withdrawing consent for marketing will not affect the use of your data for other purposes necessary to operate your account.

BigBoss888 does not sell, rent, or trade members' personal data to third parties for commercial purposes. However, in the course of operating our platform, there are situations where your data may be shared with certain parties for legitimate reasons:

• Payment Processors: Transaction information is shared with authorised payment processors (such as FPX, Touch 'n Go, GrabPay and DuitNow providers) solely for the purpose of processing your deposits and withdrawals. These processors are bound by strict data protection agreements.
• Game Software Providers: Limited game session data is shared with game providers such as Pragmatic Play, PG Soft and Evolution Gaming to ensure smooth gameplay and resolve any technical issues.
• Legal Authorities: BigBoss888 will disclose the necessary information to the relevant authorities when required by law or court order, or when there is a need to investigate suspected illegal activity.
• Technical Support Service Providers: Third parties that assist us in operating the platform's technical infrastructure may have limited access to data required for technical work, under strict confidentiality agreements.

All third parties with access to member data BigBoss888 subject to data processing agreements that ensure they handle your information in accordance with privacy standards equal to or stricter than those we apply ourselves. They are not permitted to use the data for any purpose other than what has been agreed upon.

Protecting our members' personal data is a technical priority we take very seriously. BigBoss888 continually invests in security infrastructure to ensure your information remains protected against ever-evolving threats. The following are the key security measures we have in place:

• Data Encryption in Transit: All communications between your device and BigBoss888 servers are encrypted using TLS 1.3 with a 256-bit SSL certificate. This means that even when using public WiFi, your data cannot be read by anyone intercepting the connection.
• Stored Data Encryption: Sensitive data stored in our databases is separately encrypted using AES-256 standards. Account passwords are stored in a hashed format that cannot be decrypted.
• Internal Access Controls: Access to member data within our systems is restricted to authorised personnel only, governed by the principle of least privilege. All access is logged and monitored automatically.
• Continuous Security Monitoring: Our systems are monitored around the clock to detect any suspicious activity or attempted intrusions. Any anomalies are acted upon immediately.
• Regular Security Testing: BigBoss888 conducts regular security testing and audits to identify and address vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no security system can guarantee 100% protection. We encourage our members to take their own personal security measures, such as using strong passwords, enabling 2FA, and not sharing their account login details. BigBoss888 with anyone.

Bigboss888 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They allow the platform to remember your preferences and deliver a smoother, more personalised experience.

Types of cookies we use:

• Essential Cookies: Required for core platform functions — login, game sessions, security. Cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects data on how you use the platform (such as the most frequently visited pages) to help us improve. This data is collected anonymously.
• Functional Cookies: Remembering your preferences such as language, display settings and game preferences to provide a more personalised experience.
• Analytics Cookies: Helps us understand overall platform usage patterns for continuous improvement purposes. Information is collected in aggregate format without identifying individuals.

You can manage cookie usage through your web browser settings. Disabling certain cookies may affect some platform functionality. BigBoss888. For more information on how to manage cookies in your browser, please refer to the help documentation for the browser you are using.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and sound privacy principles, you as a member BigBoss888 have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this information within 21 days of receiving a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. You can update basic details such as your email address and phone number directly through your account settings.
• Right to Erasure: Under certain circumstances, you have the right to request the deletion of your personal data from our systems. However, this right is not absolute – there are situations where we are required to retain data for a specified period for legal reasons (such as financial records for anti-money laundering purposes).
• Right to Restrict Processing: You may request that we restrict how we process your data in certain circumstances — for example, while you are disputing the accuracy of that data.
• Right to Withdraw Consent: Where processing is based on your consent (such as for marketing), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the Department of Personal Data Protection Malaysia if you believe your data has been handled unlawfully.

To exercise any of the above rights, please contact the data privacy team BigBoss888 via email at support@bigboss888.best with the subject line "Data Privacy Request". We will verify your identity before processing your request to ensure that only you can access or request changes to your data.

Given that BigBoss888 involves financial transactions, payment data security receives special attention in our privacy policy. When you make a deposit using Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, or FPX online banking services such as Maybank2u and CIMB Clicks, we safeguard your financial data through the following measures:

• We do not store sensitive financial information: BigBoss888 does not store your PIN, password, or credit/debit card numbers in our systems. All payment processing is handled directly by authorised third-party payment processors.
• Tokenisation: To facilitate repeat deposits, we use secure payment tokens in place of your actual account details. These tokens cannot be used to carry out transactions outside the BigBoss888 platform.
• Transaction monitoring: All financial transactions are automatically monitored to detect suspicious patterns, protecting you against unauthorised use of your account by third parties.
• AML Compliance: Transaction records are retained in accordance with anti-money laundering legal requirements for the period stipulated by the relevant authorities.

If you suspect any unauthorised transactions on your account BigBoss888 your account, please contact our support team immediately. We have clear procedures in place to investigate and resolve suspected unauthorised transaction issues.

BigBoss888 does not retain your personal data longer than is necessary for the original purpose of collection or as required by law. Retention periods vary by data type:

• Active Account Data: For as long as your account remains active, we retain all account information necessary to operate our services.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of transaction, as required under Malaysia's anti-money laundering laws and financial reporting obligations.
• Gaming Activity Logs: Retained for three (3) years for dispute resolution and responsible gaming monitoring purposes.
• Support Communication Records: Retained for two (2) years from the date of the last interaction.
• Closed Account Data: After account closure, basic data is retained for seven years to fulfil legal obligations, after which it is securely deleted.

When the retention period expires or the data is no longer needed, BigBoss888 will securely delete or anonymise that data using procedures that ensure it cannot be recovered or re-identified.

Platform BigBoss888 is intended strictly for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. Should we discover that a child's personal data has been collected inadvertently, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian who believes that a minor in your care has registered an account with BigBoss888, please contact us immediately at support@bigboss888.best. We will investigate the matter as a high priority and take appropriate action, including account closure and deletion of all associated data.

BigBoss888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or the way we handle data. We are committed to informing members of any material changes through:

• An in-platform notification on BigBoss888 the next time you log in after changes are published.
• Email to your registered address for significant changes affecting your privacy rights.
• Update the "Effective Date" at the top of this page.

We encourage you to review this Privacy Policy page periodically. Your continued use of the BigBoss888 after a policy change takes effect will be considered your acceptance of the updated policy. If you do not agree with any changes made, you have the right to close your account and stop using the platform.

If you have any questions, concerns or requests relating to this Privacy Policy or the handling of your personal data by BigBoss888, please contact us through the following channels:

• Privacy Email: support@bigboss888.best – please use the subject line "Data Privacy Enquiry" so we can route your request to the right team as quickly as possible.
• Live Chat: Available 24 hours a day, 7 days a week in Bahasa Melayu – for general enquiries about our privacy policy.

For formal requests relating to data rights (access, correction, deletion), please submit a written request by email, including your account number and a detailed description of your request. We will first verify your identity and provide a response within 21 days of receiving your complete request.

We take your privacy seriously and are committed to resolving any concerns in a transparent, fair and reasonable manner. The trust of Malaysia's player community is the foundation of everything we do at BigBoss888.