Privacy Policy — Boboslot

01.Introduction

This Privacy Policy ("Policy") is published by boboslot.cam ("Boboslot", "we", "us", "our") and applies to all personal data processed in connection with your use of our online casino and sports betting platform accessible at https://boboslot.cam ("Platform").

Boboslot is committed to protecting the privacy and security of all individuals who access our Platform, including registered players, visitors, and prospective users. This Policy describes the categories of personal data we collect, the purposes for which that data is processed, the parties with whom it may be shared, and the rights available to you as a data subject.

This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Platform more broadly. By creating an account or using any feature of the Platform, you acknowledge that you have read and understood this Policy.

02.Definitions

The following terms carry the meanings ascribed to them below throughout this Policy:

• "Personal Data" — any information that identifies or could reasonably identify a living individual, including names, email addresses, identification numbers, IP addresses, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, alteration, or deletion.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, the Data Controller is Boboslot.
• "Data Processor" — a third party that processes Personal Data on behalf of the Data Controller under a contractual arrangement.
• "Data Subject" — the identified or identifiable natural person to whom Personal Data relates; in the context of this Platform, this is primarily each registered Player.
• "Consent" — a freely given, specific, informed, and unambiguous indication of a Data Subject's agreement to the processing of their Personal Data for a stated purpose.
• "KYC" — Know Your Customer procedures used to verify the identity, age, and source of funds of a Player prior to processing deposits or withdrawals.
• "Cookie" — a small text file placed on a user's device by a website to store session information, preferences, or analytics data.

03.Data Controller

Boboslot acts as the Data Controller in respect of all Personal Data collected through the Platform. As Data Controller, Boboslot determines the purposes and means by which your Personal Data is processed and is responsible for ensuring that processing activities comply with applicable data protection law.

Where Boboslot engages third-party service providers — such as payment processors, KYC verification platforms, customer support tools, or analytics providers — those parties act as Data Processors and are bound by contractual obligations that restrict their use of your data to the specific purpose for which it was shared.

You may contact Boboslot's data point of contact at any time using the details provided in Section 17 (Contact Us) of this Policy.

04.Data We Collect

Boboslot collects Personal Data in the following categories, depending on how you interact with the Platform:

• Full name, username, date of birth, and gender (where provided).
• Email address and mobile phone number.
• Residential address, including city and postcode (e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam).
• Government-issued identification documents (e.g., MyKad, passport) collected during KYC verification.

• Deposit and withdrawal amounts, dates, and methods (e.g., Touch 'n Go eWallet, Boost, GrabPay, Maybank FPX, CIMB FPX, Public Bank FPX, DuitNow, USDT, BTC, ETH).
• Account balance and wagering history.
• Bank account or e-wallet identifiers used in transactions — note that full card numbers are never stored by Boboslot.
• Cryptocurrency wallet addresses associated with your account.

• IP address and approximate geolocation derived therefrom.
• Device type, operating system, browser type and version.
• Pages visited, session duration, game titles accessed, and betting activity.
• Log data including timestamps, error reports, and access logs.

• Contents of live chat transcripts and support email exchanges.
• Responses to surveys or feedback forms where voluntarily completed.
• Promotional communication preferences and opt-in/opt-out records.

• Self-exclusion requests, cooling-off periods, and account restriction settings.
• Deposit limit, loss limit, and session duration configurations applied by you.

05.Purposes of Processing

Boboslot processes your Personal Data for the following purposes:

06.Legal Basis for Processing

Boboslot processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions, including account creation, payment processing, and game access.
• Legal Obligation: Processing required to comply with applicable legislation, including anti-money laundering regulations, age verification requirements, and tax reporting obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, and internal analytics, where such interests are not overridden by your fundamental rights.
• Consent: Processing for marketing communications and optional profiling, where you have provided explicit, freely given consent that may be withdrawn at any time without consequence.

07.Data Sharing

Boboslot does not sell your Personal Data. We may share your data with third parties only in the limited circumstances described below:

• Payment Processors: Financial institutions, e-wallet operators (including Touch 'n Go, Boost, GrabPay), FPX gateway providers, and cryptocurrency processing services receive transaction-related data necessary to facilitate your deposits and withdrawals.
• KYC & Compliance Providers: Identity verification service providers receive identity documents and associated data to perform age and fraud checks on our behalf.
• IT & Hosting Infrastructure: Cloud hosting and data centre providers process certain technical data as part of maintaining platform availability and security.
• Regulatory Authorities: Where required by law or court order, Boboslot may disclose Personal Data to law enforcement agencies, financial regulators, or other competent authorities.
• Fraud Prevention Networks: In cases of suspected fraud, Boboslot may share relevant data with industry fraud prevention bodies.
• Corporate Transactions: In the event of a merger, acquisition, or asset sale, Personal Data held by Boboslot may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third-party Data Processors engaged by Boboslot are subject to contractual data processing agreements that restrict their use of your Personal Data to the specific purpose for which it was shared and require them to maintain appropriate security standards.

08.Data Retention

Boboslot retains Personal Data for as long as is necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by law.

• Active Accounts: Personal Data associated with active accounts is retained for the duration of your registration on the Platform.
• Closed Accounts: Following account closure, core account and transaction records are retained for a minimum of five (5) years to satisfy anti-money laundering and legal compliance obligations.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Communications: Support chat transcripts and email correspondence are retained for up to three (3) years to assist with dispute resolution and quality assurance.
• Analytics & Technical Data: Anonymised or aggregated usage data may be retained indefinitely for platform improvement purposes.

When Personal Data is no longer required, it is securely deleted or anonymised in accordance with our internal data disposal procedures.

09.Data Security

Boboslot implements a range of technical and organisational measures to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the Platform.
• Encrypted storage of all sensitive Personal Data and financial information at rest.
• Role-based access controls ensuring that only authorised personnel can access Personal Data, and only to the extent required for their specific function.
• Regular internal and third-party security audits to identify and remediate vulnerabilities.
• Incident response procedures that include mandatory notification timelines in the event of a data breach affecting your rights and freedoms.

10.Cookies & Tracking Technologies

Boboslot uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and improve your experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function, including session management, login authentication, and security features. These cannot be disabled.
• Functional Cookies: Store your preferences such as language settings and last-visited game categories to provide a more personalised experience.
• Analytics Cookies: Collect anonymised data about how visitors use the Platform — pages visited, session duration, and navigation paths — to help us improve usability.
• Marketing Cookies: Used to measure the effectiveness of promotional campaigns. These are only activated where you have provided consent.

You may manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Platform. Continued use of the Platform following the display of our cookie notice constitutes acceptance of our use of non-essential cookies where permitted by law.

11.International Data Transfers

Boboslot operates in a global environment and some of the service providers we engage may process your Personal Data in jurisdictions outside of Malaysia. Where such transfers occur, Boboslot ensures that appropriate safeguards are in place, which may include:

• Contractual clauses requiring the receiving party to protect Personal Data to standards equivalent to those applicable in Malaysia.
• Transfers to entities in jurisdictions recognised as providing an adequate level of data protection.
• Other legally approved transfer mechanisms as applicable under the laws of the relevant jurisdiction.

You may request further information about the specific safeguards in place for any particular international transfer by contacting us at the address provided in Section 17.

12.Your Data Rights

Subject to applicable law, you have the following rights in relation to your Personal Data held by Boboslot. To exercise any of these rights, please contact us at [email protected] with sufficient detail for us to identify your account and process your request.

13.Children's Privacy

The Platform is strictly restricted to individuals aged 21 years and above. Boboslot does not knowingly collect, process, or retain Personal Data relating to persons under the age of 21.

If Boboslot becomes aware that Personal Data has been collected from a person under the age of 21, the relevant account will be suspended immediately, all data associated with that account will be securely deleted, and any deposits made will be returned (less any reversible transaction costs) following verification.

If you believe that a person under the age of 21 has registered on the Platform, please contact us immediately at [email protected] so that we may investigate and take appropriate action.

14.Marketing Communications

Where you have consented to receive marketing communications, Boboslot may contact you by email or other electronic means with information about promotions, bonuses, new game releases, and platform updates. Examples of communications you may receive include notices about our birthday bonus programme (up to MYR 2,688 for eligible players), referral rewards (MYR 38 per successful referral), and cryptocurrency deposit bonuses.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in your Account settings.
• Contacting our support team at [email protected] with a clear request to opt out.

Withdrawal of consent does not affect the lawfulness of processing that occurred prior to the withdrawal. Operational communications — such as payment confirmations, withdrawal notifications, and security alerts — are not marketing communications and will continue to be sent regardless of your marketing preference settings.

15.Third-Party Links

The Platform may contain references to, or links to, third-party websites or services (for example, payment provider portals or customer authentication pages). Boboslot is not responsible for the privacy practices or content of third-party websites. This Policy applies solely to data processed by Boboslot through the boboslot.cam Platform.

We encourage you to review the privacy policies of any third-party services you access in connection with using our Platform, particularly those of your chosen payment provider (e.g., Touch 'n Go, Boost, GrabPay, Maybank, CIMB, Public Bank).

16.Changes to This Policy

Boboslot reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. Where material changes are made, we will notify registered Players by email to the address held on their account, or by displaying a prominent notice on the Platform, no fewer than seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. We recommend reviewing this Policy periodically to remain informed of how Boboslot protects your data. Your continued use of the Platform after the effective date of any update constitutes acceptance of the revised Policy.

17.Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, you may contact Boboslot through the following channels:

• Email: [email protected] — responses are typically provided within 2 business hours during operating hours (9AM – 3AM MYT).
• Live Chat: Available on the Platform daily from 9AM to 3AM Malaysian Standard Time. Access the chat function directly from boboslot.cam.

When submitting a data rights request, please include your registered Account username and a description of your request in sufficient detail to allow us to process it efficiently. We will verify your identity before actioning any request that involves access to, correction of, or deletion of your Personal Data.