Privacy Policy
BosJoko is committed to protecting the personal data of every player on our platform. This Privacy Policy explains in clear, plain English what data we collect, why we collect it, how we use it, and what rights you have over your own information.
How BosJoko Protects Your Data
256-Bit SSL Encryption
All data transmitted between your device and BosJoko's servers is encrypted using industry-standard 256-bit SSL. Your login credentials, payment details, and personal information travel securely across every connection.
No Data Selling
BosJoko does not sell, rent, or trade your personal information to unrelated third parties for marketing purposes. Your data is used strictly to deliver, improve, and safeguard the services you use on this platform.
Your Rights, Respected
You have the right to access, correct, export, or request deletion of your personal data. Submit a data request to our support team and we will respond within 14 business days in accordance with applicable data protection principles.
Segregated Data Storage
Personal data and financial transaction records are stored in logically segregated, access-controlled environments. Only authorised personnel with a genuine operational need can access specific categories of player data.
Minimal Data Collection
We collect only the personal data that is strictly necessary for account operation, regulatory compliance (KYC/AML), and service delivery. We do not collect excessive or irrelevant personal information.
Transparent Cookie Use
BosJoko uses cookies and similar tracking technologies only for essential platform functionality, security, and aggregate analytics. We do not use third-party behavioural advertising cookies that profile you across unrelated websites.
01 Introduction
BosJoko ("we", "us", "our", or "the Platform") respects the privacy of all individuals who access and use our online gambling platform at bosjoko.cam. This Privacy Policy ("Policy") sets out in detail the practices by which BosJoko collects, stores, processes, uses, shares, and protects personal data provided by users ("you", "your", "the Player") in the course of registering for and using the Platform.
This Policy is designed to be read alongside BosJoko's Terms & Conditions, which govern the contractual relationship between you and the Platform. Where terms are defined in the Terms & Conditions, those definitions apply equally here unless otherwise specified.
BosJoko primarily serves players based in Malaysia, including those located in Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and surrounding areas. This Policy reflects our commitment to handling personal data responsibly and in accordance with applicable international data protection standards.
By registering an account or continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read and understood its contents and consent to the data processing practices described herein.
02 Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings ascribed to them below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a living individual, directly or indirectly — e.g. name, email address, MyKad number, IP address. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, alteration, retrieval, use, disclosure, transfer, erasure, or destruction. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data — in this context, BosJoko. |
| "Data Processor" | A third party that processes personal data on behalf of BosJoko, under written instruction — e.g. payment service providers, identity verification vendors. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose. |
| "KYC" | Know Your Customer — regulatory identity verification procedures designed to confirm the identity and age of a player before allowing withdrawals or full account access. |
| "Cookies" | Small text files placed on your device by the Platform to store session state, preferences, and certain analytical data. |
03 Data Controller
BosJoko, operating through the domain bosjoko.cam, acts as the Data Controller in respect of all personal data collected through the Platform. BosJoko determines the purposes for which your personal data is processed and the means by which that processing takes place.
BosJoko operates under an international online gambling licence (Curacao jurisdiction). Data protection obligations are discharged in accordance with internationally recognised standards and the terms of that licensing framework. For Malaysian residents, BosJoko observes principles consistent with the Personal Data Protection Act 2010 (Malaysia) where these apply to our processing activities in respect of Malaysian data subjects.
04 Personal Data We Collect
BosJoko collects personal data across several categories, depending on the nature of your interaction with the Platform:
4.1 Registration Data
When you create an account, we collect: full legal name, date of birth, email address, mobile phone number, preferred username, and the country and city of residence. For Malaysian players, this typically includes confirmation of a Kuala Lumpur, Penang, Johor Bahru, or other Malaysian address.
4.2 Identity Verification (KYC) Data
To comply with anti-money laundering (AML) regulations and our licensing obligations, we collect: a copy of your Malaysian National Identity Card (MyKad, front and back) or valid passport, a recent proof of address document (e.g. utility bill or bank statement issued within 90 days), and where required, proof of payment method ownership.
4.3 Financial Transaction Data
We record details of all deposits and withdrawals processed through your account, including transaction amounts (in MYR), timestamps, payment method used (e.g. Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank), and transaction reference numbers.
4.4 Gameplay and Betting Data
We maintain records of all games played, bets placed (including on EPL, Liga Super Malaysia, UFC, and other sports markets), wager amounts, game outcomes, bonus utilisation, and session durations. This data is used for account management, dispute resolution, responsible gambling monitoring, and regulatory compliance.
4.5 Technical and Device Data
We automatically collect certain technical data when you access the Platform, including: IP address, browser type and version, device type and operating system, screen resolution, time zone, and referring URL. This data helps us detect fraud, maintain security, and optimise the Platform for Malaysian users.
4.6 Communications Data
If you contact our support team via live chat or email, we retain records of those communications — including the content, timestamp, and resolution outcome — for quality assurance, training, and compliance purposes.
You are not required to provide personal data beyond what is necessary for account registration and KYC. However, failure to provide required information may result in limited account functionality or an inability to process withdrawals.
05 How We Collect Your Data
BosJoko collects personal data through the following channels:
- Direct submission: Information you provide when registering an account, completing KYC, making a deposit or withdrawal request, or contacting our support team.
- Automated technical collection: Data captured automatically as you browse and interact with the Platform — including cookies, server log files, and device fingerprinting.
- Third-party sources: Identity verification data confirmed by our KYC partners; fraud signals from payment processors; geolocation data from IP intelligence services used to verify eligible access.
- Payment providers: Transaction confirmations and payment method ownership data received from Malaysian payment partners including DuitNow, FPX, and e-wallet operators.
06 Legal Basis for Processing
BosJoko processes your personal data on one or more of the following legal bases:
| Legal Basis | Application |
|---|---|
| Contractual necessity | Processing required to open and manage your account, process transactions, and deliver the gambling services you have requested. |
| Legal obligation | KYC/AML compliance, age verification, fraud prevention, and reporting obligations under our international gaming licence. |
| Legitimate interests | Fraud detection, platform security, responsible gambling monitoring, analytics to improve service quality, and direct marketing to existing players about relevant offers. |
| Consent | Where we rely on consent — for example, for certain optional marketing communications — you may withdraw that consent at any time by contacting our support team. |
07 How We Use Your Personal Data
The personal data we collect is used for the following purposes:
- To create, verify, manage, and administer your BosJoko account;
- To process deposits, withdrawals, and other financial transactions in MYR;
- To comply with KYC, AML, and responsible gambling obligations imposed by our licensing authority;
- To verify your age (minimum 21 years) and identity before granting access to full account functionality;
- To detect, investigate, and prevent fraudulent transactions, multi-accounting, collusion, and other prohibited activities;
- To provide customer support in English, Bahasa Melayu, and Mandarin via live chat and email;
- To monitor gameplay patterns and account behaviour for responsible gambling purposes — including identifying players who may be exhibiting signs of problem gambling;
- To send account-related transactional communications (e.g. deposit confirmations, withdrawal notifications, KYC status updates);
- To send promotional communications about bonuses, offers, and new features, where you have not opted out of such communications;
- To improve, personalise, and optimise the Platform's content, layout, and feature set for Malaysian users;
- To comply with orders, subpoenas, or requests from law enforcement authorities or regulatory bodies.
08 Data Sharing & Disclosure
BosJoko does not sell your personal data. We share your data only in the following defined circumstances:
8.1 Service Providers and Data Processors
We engage trusted third-party service providers who process personal data on our behalf under strict data processing agreements. These include: identity verification and KYC platforms, payment processing companies (including Malaysian e-wallet and bank partners), fraud detection and AML screening services, cloud infrastructure and hosting providers, and customer support software operators.
8.2 Regulatory and Legal Disclosure
We may disclose personal data to relevant regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or our licensing obligations. This includes reporting suspicious transactions to relevant financial intelligence units where legally mandated.
8.3 Business Transfers
In the event of a merger, acquisition, or sale of all or part of BosJoko's business, player data may be transferred to the acquiring entity, provided that entity agrees to honour the commitments set out in this Privacy Policy.
8.4 Responsible Gambling Partners
Where a player has requested self-exclusion or where BosJoko has identified a player requiring responsible gambling intervention, limited account status data may be shared with responsible gambling scheme operators to give effect to a self-exclusion request.
BosJoko does not share your personal data with unrelated advertising networks, data brokers, or third-party marketing companies without your explicit consent.
09 Cookies & Tracking Technologies
BosJoko uses cookies and similar client-side technologies on its Platform. The following categories of cookies are in use:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Maintain login session state, CSRF protection tokens, and platform security. Without these, the Platform cannot function. | No — required for operation |
| Functional | Remember language preferences, display settings, and user interface configurations to improve your experience. | Yes — via browser settings |
| Analytics | Aggregate, anonymised data on how users interact with pages, which features are used, and where users encounter errors. Used to improve the Platform. | Yes — via browser settings |
| Fraud & Security | Device fingerprinting and session integrity checks used to detect multi-accounting, bot activity, and account takeover attempts. | No — required for security |
You may control cookies through your browser settings. Please note that disabling functional or analytics cookies may affect the usability of certain Platform features. BosJoko does not use third-party behavioural advertising cookies that track you across external websites.
10 Data Retention
BosJoko retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by our licensing obligations and applicable law. The following general retention periods apply:
- Active account data: Retained for the duration of your account's active status plus a minimum of 5 years following account closure, in accordance with AML record-keeping obligations.
- Transaction records: Retained for a minimum of 5 years from the date of the transaction.
- KYC documents: Retained for a minimum of 5 years following the end of the business relationship, or longer where required by regulatory directive.
- Support communications: Retained for 2 years following the resolution of the communication, unless the communication forms part of a formal dispute record, in which case it is retained for 5 years.
- Technical / device logs: Retained for 12 months on a rolling basis unless flagged as part of a fraud or security investigation.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.
11 Data Security
BosJoko implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
- Encryption in transit: All data exchanged between your device and our servers is protected by 256-bit Transport Layer Security (TLS/SSL) encryption.
- Encryption at rest: Sensitive personal data including payment details and KYC documents is encrypted at rest in our database infrastructure.
- Access controls: Strict role-based access controls ensure that personal data is accessible only to BosJoko personnel who have a genuine operational need for it, governed by the principle of least privilege.
- Two-factor authentication: Available for all player accounts. We strongly recommend all BosJoko players to enable 2FA on their accounts.
- Regular security audits: Our platform infrastructure undergoes periodic security assessments and penetration testing.
- Incident response: BosJoko maintains a documented data breach response procedure. In the event of a security incident materially affecting your personal data, we will notify affected users within a reasonable timeframe.
No digital platform can guarantee absolute security. You are responsible for keeping your BosJoko login credentials confidential and for logging out of your account when using shared devices.
12 International Data Transfers
BosJoko operates under an international licence (Curacao jurisdiction) and may use service providers — including cloud infrastructure, KYC verification, and payment processing partners — whose servers are located outside Malaysia. As a result, your personal data may be transferred to and processed in countries other than Malaysia.
When we transfer personal data internationally, we take steps to ensure that the transfer is subject to appropriate safeguards, including:
- Contractual data processing agreements incorporating standard data protection clauses with recipient service providers;
- Transfers to jurisdictions that maintain an adequate level of data protection under applicable standards;
- Technical safeguards (encryption, access controls) that travel with the data regardless of where it is processed.
13 Your Data Rights
BosJoko recognises the following rights in relation to your personal data. To exercise any of these rights, contact our support team via live chat or at [email protected] (plain text — not a link). We will respond within 14 business days.
Request a copy of the personal data BosJoko holds about you, along with information on how it is used.
Request correction of inaccurate or incomplete personal data held in your account.
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations.
Request that we limit the processing of your personal data in certain circumstances, such as where you contest its accuracy.
Request your personal data in a structured, machine-readable format so you may transfer it to another service provider.
Where processing is based on consent (e.g. marketing communications), withdraw that consent at any time without affecting the lawfulness of prior processing.
Please note that certain rights are subject to limitations. For example, we cannot delete financial transaction records that we are legally required to retain. We will always explain the basis for any limitation when responding to your request.
14 Children's Privacy
BosJoko's Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. Age verification is a mandatory step in the KYC process for all accounts.
If BosJoko becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to suspend the account, void any transactions, and securely delete the associated personal data. If you are a parent or guardian and believe your child has registered on our Platform, please contact our support team immediately.
15 Third-Party Links
The BosJoko Platform does not include links to unrelated third-party websites. All navigation links within the Platform direct exclusively to BosJoko's own pages. This Privacy Policy applies solely to personal data processed by BosJoko in connection with the operation of bosjoko.cam.
Where BosJoko uses third-party service providers (such as payment processors or KYC vendors), those providers operate under their own privacy policies and data processing agreements with BosJoko. BosJoko takes reasonable steps to ensure that all such providers maintain adequate data protection standards.
16 Amendments to This Policy
BosJoko reserves the right to update this Privacy Policy periodically to reflect changes in our data processing practices, applicable legal requirements, or platform functionality. The "Last Updated" date at the top of this Policy will always reflect the most recent revision.
Where changes are material — for example, a new category of data being collected, a new third-party data sharing arrangement, or a change in the legal basis for processing — BosJoko will notify registered users via email or an in-platform notification with reasonable advance notice before the changes take effect.
Your continued use of the Platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept a material change to this Policy, you may request account closure by contacting our support team.
17 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or BosJoko's handling of your personal data, please reach us through the following channels:
- 24/7 Live Chat: Available directly on the Platform — average response time 3–5 minutes. Support is available in English, Bahasa Melayu, and Mandarin.
- Email: [email protected] (plain text — not a clickable link). Responses within 24 hours.
For formal data access or erasure requests, please include the subject line "Data Privacy Request – [your registered username]" and specify the right you wish to exercise. We will acknowledge receipt within 2 business days and aim to resolve the request within 14 business days.
This Privacy Policy was last reviewed and updated on 1 January 2026. BosJoko reserves all rights not expressly granted herein.
Your Privacy Is Our Priority
Play on a platform that handles your data with the same care it applies to your winnings. BosJoko: fast, secure, and transparent for every Malaysian player.
For players aged 21 and above only. Please gamble responsibly.