Malaysia PDPA Compliance

Bigboss88 Privacy Policy – Personal Data Protection in Malaysia

Bigboss88 takes your privacy very seriously. This document clearly explains how we collect, use, store, and protect the personal data of all our members in Malaysia.

Updated: 1 January 2026 SSL 256-bit PDPA Compliant No Data Sales
Full Encryption
256-bit SSL at all times
No Data Sales
Your data is never sold
Malaysia PDPA
Compliant with the Personal Data Protection Act 2010
Right to Rectification
Update your data at any time

This Privacy Policy document ("Policy") describes how BigBoss88 ("we", "the platform") handles your personal information when you use our website, applications, and all services we provide. This Policy has been prepared in accordance with the Personal Data Protection Act 2010 (PDPA) Malaysia.

By registering for or using the BigBoss88 platform, you agree to the data collection and usage practices described in this Privacy Policy. We encourage you to read this document carefully and to contact us should you have any questions.

01

Introduction & bigboss88's Privacy Commitment

Bigboss88 is a Sports Betting and online casino platform that has served Malaysians since 2015. Over more than a decade of operations, we have collected, processed, and stored the personal data of millions of member transactions — and we understand the weight of trust that every member places in us.

Our commitment to privacy goes beyond legal compliance. We believe every BigBoss88 member deserves to know exactly what happens to their data — who can see it, what it is used for, how long it is retained, and how it is protected. That is the purpose of this document.

We only collect data that is strictly necessary to provide our services. We do not collect data to sell to advertisers. We do not share your personal information with third parties without your consent, except where required by Malaysian law.

bigboss88's Acknowledgement

BigBoss88 is fully committed to complying with the Malaysia Personal Data Protection Act 2010 (PDPA) across all data processing operations. We have appointed a Data Protection Officer (DPO) responsible for ensuring ongoing compliance.

02

Types of Personal Data We Collect

BigBoss88 collects your personal data through several channels — directly when you fill in a registration form, automatically when you use the platform, and occasionally from relevant third-party sources. The categories of data we collect are as follows:

Data Categories Example Mandatory / Optional Primary Purpose
Personal Identity Full name, MyKad number, date of birth Mandatory Identity verification, KYC
Contact Information Email, phone number, address Mandatory Communications, notifications
Financial Data Bank account number, Malaysian e-wallet Mandatory Deposits & withdrawals
Usage Data IP address, device type, activity logs Automatic Security, analytics
Betting Data Bet history, winnings, games Automatic AML & Legal Compliance
Cookies & Tracking Session cookies, user preferences Automatic User experience
Important Note

BigBoss88 never stores credit or debit card details directly. All payment transactions are processed through PCI-DSS compliant payment gateways, including Touch 'n Go eWallet, DuitNow, GrabPay, FPX (Maybank2u, CIMB Clicks), Boost, and ShopeePay.

03

How We Use Your Personal Data

Every piece of data collected by bigboss88 is used for specific and legitimate purposes. We do not use your data for anything beyond what is stated in this Privacy Policy without obtaining your further consent.

  • Account Management: To create and manage your BigBoss88 account, verify your identity, and securely process all deposit and withdrawal transactions.
  • Service Delivery: Giving you access to all BigBoss88 games — Malaysia Super League & EPL Sports Betting, badminton, Live Casino (baccarat, roulette), slots, and e-sports.
  • Security & Fraud Prevention: Detecting and preventing suspicious activity, fraud, account misuse, and money laundering (AML) on the BigBoss88 platform.
  • Legal Compliance: To meet the reporting and KYC (Know Your Customer) obligations required under Malaysian law.
  • Customer Support: Providing effective assistance via live chat, WhatsApp, and email whenever you reach out to the BigBoss88 support team.
  • Platform Improvements: Analysing usage patterns in aggregate (not at the individual level) to improve the user experience, resolve technical issues, and develop new features on bigboss88.
  • Marketing Communications: Sending you relevant promotions, bonuses, and special offers — only if you have consented to receive such communications. You may unsubscribe at any time.
  • Responsible Gambling: To monitor betting patterns in order to identify signs of problem gambling and provide appropriate support to members who need it.
Legal Basis for Processing

Bigboss88 processes your personal data on the basis of: (a) performance of a service contract with you; (b) compliance with legal obligations; (c) bigboss88's legitimate interests in fraud prevention; and (d) consent you have explicitly provided for marketing.

04

Sharing Data with Third Parties

Bigboss88 does not sell, lease, or commercially exploit your personal data to any third party for their marketing purposes. However, in the course of running our operations, we may share your data with a limited and selected category of third parties in the following situations:

  • Payment Service Providers: Our payment partners in Malaysia — including Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and banks supporting FPX — need to receive transaction information in order to process your deposits and withdrawals.
  • Game Software Providers: Companies providing Live Casino, slots, and sports gaming platforms may process your game session data for technical purposes.
  • Identity Verification Services: Third-party providers that assist bigboss88 in carrying out KYC (Know Your Customer) and age verification processes.
  • Legal Authorities: Where required by Malaysian law, court order, or an official investigation by an enforcement body, BigBoss88 will disclose the necessary data.
  • Business Transfer: In the event that bigboss88 is involved in a merger, acquisition, or asset transfer, member data may be transferred as part of the business assets, with the same level of protection maintained.

All third parties with whom we share data are contractually obligated to protect that data and use it solely for the specified purposes. BigBoss88 ensures all partners adhere to data protection standards equivalent to or higher than our own.

05

Data Security & Protection Measures

BigBoss88 continuously invests in cybersecurity infrastructure to ensure all members' personal data is protected to the highest standard. Our technical and organisational security measures include:

  • 256-bit SSL/TLS Encryption: All communications between your device and BigBoss88's servers are encrypted using the same SSL/TLS protocols adopted by banking institutions in Malaysia.
  • Data Encryption at Rest: Data stored in bigboss88's databases is encrypted using AES-256 standards.
  • Strict Access Controls: Only authorised BigBoss88 staff with a legitimate business need may access members' personal data. All access is logged and monitored.
  • Two-Factor Authentication (2FA): BigBoss88's internal systems use multi-factor authentication for all administrative access.
  • 24/7 Monitoring: bigboss88's security team continuously monitors our systems to detect any threats or intrusions.
  • Regular Penetration Testing: BigBoss88 conducts regular independent security testing to identify and patch any vulnerabilities.
Your Responsibilities

While BigBoss88 takes all reasonable steps to protect your data, the security of your account also depends on your own actions. Please keep your password confidential, do not share your login credentials with anyone, and contact us immediately if you suspect any unauthorised access to your BigBoss88 account.

06

Cookies & Tracking Technologies

The BigBoss88 platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform runs smoothly. The types of cookies we use are as follows:

You can manage your cookie preferences through your web browser settings. However, disabling essential cookies may affect core functions of the BigBoss88 platform, including the ability to log in and place bets.

07

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding personal data held by BigBoss88. We are committed to respecting and facilitating the exercise of these rights.

Right of Access
Request a copy of your personal data held by BigBoss88
Right to Rectification
Correct inaccurate or incomplete data
Right to Erasure
Request erasure of your data in certain circumstances
Right to Restriction
Restrict the processing of your data in certain circumstances
Right to Object
Object to the processing of your data for direct marketing
Right to Data Portability
Receive your data in a machine-readable format

To exercise any of the above rights, please contact bigboss88's Data Protection Officer by email: privacy@bigboss88.biz. We will process your request within 30 business days of receipt. No charges apply for your first request.

Exemptions

The right to erasure may be limited in cases where BigBoss88 is required to retain data in order to comply with Malaysian law, including AML/CTF reporting requirements and mandatory financial record-keeping obligations.

08

Data Retention Period

Bigboss88 retains your personal data only for as long as necessary for the purposes outlined in this Privacy Policy, or as required by Malaysian law. The following are general guidelines for our retention periods:

Data Categories Retention Period Purpose
Active Account Data Throughout active account + 7 years KYC & AML Requirements
Transaction Records 7 years from transaction date Financial regulatory compliance
Communication Logs 2 years Dispute resolution
Analytics Cookies 13 months Platform analytics
Closed Accounts 7 years after closure Legal compliance

Once the retention period expires, bigboss88 will securely delete or anonymise your data in accordance with established data deletion procedures.

09

Children's Privacy & Protection of Young Persons

Bigboss88 strictly prohibits anyone under the age of 18 from registering or using our platform in any capacity. This is a non-negotiable policy.

We use multiple mechanisms to verify age during registration, including MyKad number checks and KYC processes. Should BigBoss88 discover that personal data of an individual under 18 has been collected inadvertently, we will delete that data immediately and close the account without any deposit refund.

Parents and guardians with concerns about a minor in their care using the BigBoss88 platform may contact us at privacy@bigboss88.biz for immediate action.

10

Privacy Policy Amendments

BigBoss88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational reasons. When we make material changes, we will notify you via:

  • An email sent to your registered BigBoss88 address
  • A prominent notice displayed on the platform's main page
  • Notifications within your BigBoss88 account

The "Last Updated" date at the top of this document will always reflect the date of the most recent amendment. We encourage you to review this Privacy Policy periodically to stay informed about how BigBoss88 protects your data.

Current Version: 2.5 | Effective Date: 1 January 2026

11

Contact Us – bigboss88 Data Protection Officer

If you have any questions or concerns, or wish to exercise your rights under this Privacy Policy, please contact the BigBoss88 Data Protection Officer (DPO) through the following channels:

DPO Email
privacy@bigboss88.biz
Live Chat
Available 24/7 within the platform
Response Time
Within 30 working days
Complaints to Authorities

If you are not satisfied with how BigBoss88 has handled your privacy complaint, you have the right to lodge a complaint with the Malaysian Personal Data Protection Commissioner under PDPA 2010.

BigBoss88 Data Protection
Bank-grade security technology for every member
EncryptionSSL 256-bit
ComplianceMalaysia PDPA
Data SalesNone at All
Monitoring24/7/365

BigBoss88's 6 Layers of Privacy Protection

End-to-End Encryption
256-bit SSL protects all data in transit between you and bigboss88's servers — the same level of protection used by banks.
Strict Access Control
Only authorised bigboss88 staff may access your data. All access is logged and audited.
PDPA Compliance
All of BigBoss88's data handling practices comply with Malaysia's Personal Data Protection Act 2010.
No Data Sales
BigBoss88 has never sold and will never sell members' personal data to advertisers or data brokers.
Regular Independent Audits
BigBoss88's security systems undergo penetration testing and independent audits on a regular annual basis.
Breach Notifications
In the event of a data breach affecting you, BigBoss88 will notify you within 72 hours.
Register with Confidence

Your Data Is Safe with BigBoss88 — Register Today

With bank-grade personal data protection and full Malaysia PDPA compliance, you can enjoy the best betting experience with complete peace of mind.

SSL 256-bit PDPA Compliant No Data Sales 24/7 Support
* For individuals aged 18 and above only. Play responsibly.
Bahasa Melayu