bossku88 Privacy Policy

1. Introduction

1.1 bossku88 is committed to protecting the privacy and personal data of all players who register and use the Platform. This Privacy Policy applies to all personal data processed by bossku88 in connection with the operation of bossku88.co, the bossku88 mobile application, and all associated gaming and betting services.

1.2 This Privacy Policy should be read alongside the bossku88 Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions regarding the handling of personal data, this Privacy Policy shall prevail.

1.3 bossku88 processes personal data in accordance with applicable international data protection standards and the requirements of the gaming authority under which it operates. We take our obligations seriously and are committed to using your data only in ways that are fair, transparent, and lawful.

2. Data We Collect

2.1 bossku88 collects personal data from you in the following categories:

2.2 bossku88 does not collect special category personal data (such as health data, biometric data, or racial or ethnic origin) unless specifically required by applicable gaming regulatory obligations, such as responsible gaming assessment processes. In such cases, your explicit consent will be obtained prior to collection.

2.3 Where you choose not to provide certain personal data that bossku88 requires to operate your account or comply with regulatory obligations, bossku88 may be unable to provide some or all Platform services to you.

3. How We Use Your Data

3.1 bossku88 uses your personal data for the following purposes:

• Account Management: To create, verify, operate, and maintain your bossku88 account, including verifying your identity and age in compliance with regulatory requirements.
• Service Delivery: To provide you with access to games, sportsbook betting, jackpots, and all other bossku88 Platform services, including processing deposits and withdrawals in MYR.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, money laundering, account compromise, and other illegal activities on bossku88.
• Regulatory Compliance: To comply with applicable laws, gaming authority requirements, anti-money laundering (AML) obligations, and Know Your Customer (KYC) requirements.
• Customer Support: To respond to your queries, complaints, and support requests relating to your bossku88 account.
• Responsible Gaming: To monitor gameplay patterns and, where necessary, take action to protect players who may be exhibiting signs of problem gambling, in accordance with bossku88's responsible gaming obligations.
• Marketing Communications: To send you promotional offers, bonuses, and platform updates relevant to your bossku88 account, where you have not opted out of such communications.
• Platform Improvement: To analyse usage data and technical information to improve bossku88 performance, user experience, and game offering.

4. Legal Basis for Processing

4.1 bossku88 processes your personal data on the following legal bases:

• Contractual Necessity: Processing necessary to perform our agreement with you under the bossku88 Terms & Conditions, including operating your account and processing transactions.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including AML, KYC, and gaming authority requirements.
• Legitimate Interests: Processing undertaken to pursue bossku88's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of marketing communications. You may withdraw consent at any time.

5. Sharing Your Data

5.1 bossku88 does not sell, rent, or trade your personal data to third parties for their own commercial purposes.

5.2 bossku88 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Game Providers: Certified gaming software providers (e.g., Pragmatic Play, PG Soft, and others) require limited data to authenticate your session and record game outcomes. These providers are themselves subject to gaming authority licensing obligations.
• Payment Processors: Payment service providers (including Touch 'n Go, Boost, GrabPay, FPX banking partners, and cryptocurrency processors) receive necessary transaction data to process deposits and withdrawals.
• Identity Verification Services: Third-party KYC and age verification service providers who assist bossku88 in meeting its regulatory identity verification obligations.
• Regulatory Authorities: Gaming regulators, law enforcement agencies, and government bodies where bossku88 is legally required to disclose information.
• Fraud Prevention Services: Third-party fraud detection and anti-money laundering screening services engaged to protect the integrity of the bossku88 Platform.
• IT Infrastructure Providers: Cloud hosting, database, and technical infrastructure providers who process data on bossku88's behalf under contractual data processing agreements.

5.3 All third parties engaged by bossku88 to process personal data on its behalf are required to handle that data securely, in accordance with bossku88's instructions, and in compliance with applicable data protection standards.

6. Cookies & Tracking

6.1 bossku88 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential Cookies: Required for the Platform to function, including maintaining your login session, remembering your preferences, and supporting security features.
• Analytics Cookies: Used to understand how players navigate and use the bossku88 Platform, enabling us to identify areas for improvement. Data collected is aggregated and anonymised where possible.
• Functional Cookies: Enable enhanced functionality such as storing your language preference, remembering your responsible gaming tool settings, and personalising your bossku88 dashboard.

6.2 Most browsers allow you to control cookie settings through the browser's preferences menu. Please note that disabling essential cookies may affect the functionality of your bossku88 account.

7. Data Retention

7.1 bossku88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum periods required by gaming regulatory and financial compliance obligations:

7.2 Following the expiry of applicable retention periods, bossku88 will securely delete or anonymise personal data such that it can no longer be associated with an identifiable individual.

8. Data Security

8.1 bossku88 implements technical and organisational security measures appropriate to the sensitivity of the personal data it processes, including:

• 256-bit SSL/TLS encryption for all data in transit between your device and bossku88 servers.
• Encryption of sensitive data fields (including passwords, which are stored as salted cryptographic hashes, and financial data) at rest.
• Role-based access controls ensuring that personal data is accessible only to authorised bossku88 personnel with a legitimate operational need.
• Regular security assessments and penetration testing of the bossku88 Platform infrastructure.
• Two-factor authentication (2FA) availability for all bossku88 player accounts.

8.2 In the event of a personal data breach that poses a risk to players' rights and freedoms, bossku88 will notify affected individuals and the relevant regulatory authority in accordance with applicable notification obligations.

8.3 You are also responsible for your own account security. bossku88 strongly recommends enabling 2FA, using a unique password not shared with other services, and logging out of your bossku88 account when using shared or public devices.

9. Your Rights

9.1 Subject to applicable law and the gaming authority's regulatory requirements, you have the following rights in relation to your personal data held by bossku88:

• Right of Access: You may request a copy of the personal data bossku88 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to Restrict Processing: You may request that bossku88 restrict processing of your data in certain circumstances, such as while a correction request is being assessed.
• Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contract.
• Right to Object: You may object to processing based on bossku88's legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

9.2 To exercise any of these rights, please contact bossku88 via the contact details in Section 14. bossku88 will respond to verified requests within 30 days. We may request proof of identity before processing your request.

9.3 Please note that some requests — in particular requests for erasure — may be limited by bossku88's legal obligations to retain data under gaming regulatory and AML requirements.

10. International Transfers

10.1 bossku88 operates globally and some of your personal data may be processed or stored on servers located outside of Malaysia. Where such transfers occur, bossku88 ensures that appropriate safeguards are in place to protect your data to an equivalent standard as required under applicable data protection law.

10.2 All third-party data processors engaged by bossku88 in jurisdictions outside Malaysia are required to enter into data processing agreements containing appropriate international transfer mechanisms.

11. Children's Privacy

11.1 If you are a parent or guardian and believe that a minor has registered a bossku88 account or provided personal data to bossku88 without your consent, please contact us immediately at the address in Section 14. bossku88 will take prompt action to close the account and delete the relevant data.

12. Third-Party Services

12.1 The bossku88 Platform may reference or integrate with third-party services (including game providers and payment processors). This Privacy Policy applies only to data processed by bossku88 directly. Third-party services are governed by their own privacy policies, which bossku88 does not control.

12.2 bossku88 is not responsible for the privacy practices of third-party game providers or payment service providers. Where bossku88 shares data with such providers, it does so under contractual data protection terms, but you should also review the applicable third-party privacy policies where relevant.

13. Changes to This Policy

13.1 bossku88 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform services. Where changes are material, bossku88 will notify registered players via email or in-platform notification prior to the changes taking effect.

13.2 The current version of this Privacy Policy is always available at bossku88.co/privacy-policy. The "Last Updated" date at the top of this document indicates when it was most recently revised. Continued use of the Platform after any update constitutes acceptance of the revised Policy.

14. Contact Us

14.1 For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by bossku88, please contact our data team:

This Privacy Policy was last updated on 1 June 2026 and supersedes all previous versions.