Privacy Policy boda8 – Malaysian User Data Protection

Boda8 ("we", "our platform") is fully committed to protecting the privacy and security of the personal data of every member who uses our services. This Privacy Policy explains in detail the types of information we collect, how we use it, who we may disclose it to, and the security measures we take to protect it.

This policy applies to all users of the boda8 platform, including website visitors, registered members, and all individuals who interact with any service offered by boda8 through our website, mobile app, or other digital channels we operate.

Boda8 fully complies with Malaysia's Personal Data Protection Act (PDPA) 2010 and all applicable data protection regulations in force. We take this responsibility seriously and continually strive to ensure our data handling practices meet or exceed the standards set by law.

Boda8 collects various types of information from our members to ensure the services we provide run smoothly, securely, and meet each user's needs. The following are the main categories of data we collect:

We only collect data that is genuinely necessary for the stated purposes. We do not collect sensitive data categories such as medical information, political views, or religious beliefs unless there is a specific legal requirement to do so.

Information we collect from you is used exclusively for legitimate purposes related to the operation of the boda8 platform. We will not use your data for any other purpose without first obtaining your explicit consent.

The primary purposes for which your data is used are:

• Account Management: Processing registration, verifying your identity through the KYC process, and ensuring your account functions correctly at all times.
• Transaction Processing: Handling all deposits, withdrawals, and other financial activities on the platform securely and accurately.
• Platform Security: Detecting and preventing fraud, money laundering, multiple account usage, and any activity that violates the platform's terms of use.
• Customer Support: Enabling our support team to provide effective, accurate, and personalised assistance to you whenever needed.
• Service Improvement: Analysing platform usage patterns to enhance the user experience, introduce new features, and ensure the platform operates at peak performance.
• Legal Compliance: Meeting reporting and compliance obligations to the relevant regulatory authorities in accordance with applicable laws.
• Marketing Communications: Sending information about promotions, bonuses, and platform updates to members who have agreed to receive such communications.

Boda8 takes a highly cautious approach to sharing member data. As a principle, we do not disclose your personal information to third parties except in the following circumstances, which we have clearly outlined:

• Trusted Service Providers: We work with selected and trusted third-party service providers — such as payment processors, cloud service providers, and analytics companies — who help us operate the platform. All such third parties are bound by strict confidentiality agreements and are only permitted to use your data for purposes we specify.
• Legal Requirements: boda8 will disclose your personal information to legal authorities, enforcement agencies, or regulatory bodies when required to do so by Malaysian law or a valid court order.
• Fraud Prevention: In specific cases involving fraud, money laundering, or criminal activity, we reserve the right to share necessary information with the relevant authorities for investigation purposes.
• With Your Consent: We may share your data with other third parties where you have given clear and revocable consent for such sharing.

Protecting your personal data is a responsibility we take very seriously. boda8 implements multiple layers of technical and organisational safeguards to keep your data secure from unauthorised access, loss, alteration, or improper disclosure.

Key security measures we use include:

• 256-bit SSL Encryption: All communication between your browser or app and the boda8 servers is protected by 256-bit SSL encryption, ensuring that transmitted data cannot be read by any unauthorised party.
• Two-Factor Authentication (2FA): Members are encouraged to enable two-factor authentication for an extra layer of protection against unauthorised access to their accounts.
• 24/7 Monitoring: Our security systems operate around the clock to detect any suspicious activity or intrusion attempts against our platform infrastructure.
• Internal Access Controls: Access to members' personal data within boda8 is restricted on a need-to-know basis. All access to sensitive data is logged and audited regularly.
• Regular Data Backups: Member data is backed up regularly to a secure, separate location to ensure service continuity in any emergency situation.
• Security Testing: The boda8 platform undergoes regular penetration testing and security audits by independent cybersecurity experts to identify and address any vulnerabilities.

While we take all reasonable steps to protect your data, no security system can be guaranteed 100% secure. You also play an important role in keeping your account safe by using a strong password and not sharing your login credentials with anyone.

Boda8 uses cookies and similar tracking technologies to enhance the user experience on our platform, understand how members interact with the platform, and ensure that essential technical functions run smoothly.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session management, security, and navigation. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information on how users interact with the platform, such as the most frequently visited pages and error messages received, to help us improve the platform.
• Functional Cookies: Storing your personal preferences such as language, display settings, and other choices to provide a more personalised and consistent experience.
• Analytics Cookies: Helping us understand aggregate platform usage patterns for the purpose of continuously improving our services.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality and user experience of the boda8 platform.

As a boda8 member and data subject under the Malaysia Personal Data Protection Act, you have the following important rights regarding your personal data that we hold:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this information within the timeframe required by law.
• Right to Rectification: If you find that any information we hold about you is inaccurate or outdated, you have the right to request immediate correction.
• Right to Erasure: Under certain circumstances, you may request that your personal data be deleted from our systems, subject to applicable legal obligations and record-keeping requirements.
• Right to Object to Processing: You have the right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where the processing of your data is based on your consent, you have the right to withdraw that consent at any time without affecting the validity of any processing carried out prior to withdrawal.

To exercise any of the rights above, please contact our privacy team by email at [email protected] or via live chat on the platform. We will process your request within 30 business days from the date we receive your complete request.

Boda8 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable laws and regulations.

In general, our data retention periods are as follows:

• Active Account Data: Retained for as long as your account remains active on the boda8 platform.
• Post-Account Closure Data: Basic account information and transaction records are retained for a minimum of 7 years after account closure to comply with legal and regulatory requirements.
• Security Logs: Security activity logs are retained for a minimum of 12 months for investigation purposes if required.
• Communication Data: Customer support communication records are retained for 3 years for reference and dispute resolution purposes.

When data is no longer needed and there is no legal obligation to retain it, boda8 will securely delete or anonymise that data using industry-approved methods.

Boda8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or technological developments related to data protection.

When we make significant changes to this Privacy Policy, we will:

• Updating the "Last Updated" date shown at the top of this page.
• Displaying clear notices on the platform regarding changes that have taken place.
• Sending email notifications to registered members regarding material and significant changes.

Continued use of the boda8 platform after any changes to the Privacy Policy take effect will be considered your acceptance of the updated policy. If you do not agree with the changes made, you have the right to close your account and stop using our platform.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

If you have any questions, concerns, or complaints regarding how boda8 handles your personal data, we encourage you to contact us directly. We are committed to addressing every enquiry seriously and within a reasonable timeframe.

• Live Chat: Available 24/7 via the chat icon on the boda8 platform — the fastest way to get an immediate response.
• Privacy Email: [email protected] — for more detailed written enquiries, we aim to respond within 24 hours.
• FAQ: Visit page FAQ page for answers to frequently asked questions about privacy and data security.