Bossku Privacy Policy – How We Protect the Personal Data of Malaysian Players

Introduction

Bossku (operating under the domain bossku.click) respects the privacy of every player who uses our platform. This Privacy Policy ("Policy") sets out clearly and transparently how Bossku collects, processes, uses, stores, protects and discloses your personal data when you use our online casino and Sports Betting platform.

This Policy applies to all registered Bossku players in Malaysia and covers all your interactions with our platform — from the registration process, depositing via Touch 'n Go eWallet or FPX, playing slots or Live Casino games, placing Sports Betting wagers on Malaysia Super League or EPL matches, through to every customer support session you initiate.

By using the Bossku platform, you acknowledge that you have read and understood this Privacy Policy and agree to the processing of your personal data as described herein. If you do not agree with this Policy, please discontinue your use of the Bossku platform.

Personal Data We Collect

Bossku collects two main categories of data: information you provide to us directly, and data collected automatically when you use the platform.

Data you provide directly:

• Registration information: Username, password (stored as an encrypted hash), active Malaysian phone number.
• Identity verification information: Full name, identity card number (MyKad), date of birth — collected when identity verification is required.
• Financial information: Bank account numbers or e-wallet details (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) used for deposits and withdrawals. We do not store credit or debit card numbers directly.
• Communication information: The contents of any live chat session, email, or other communication you initiate with the Bossku support team.
• Claim information: Details you provide when claiming a bonus or participating in a promotion.

Automatically collected data:

• Usage data: Login records, session duration, games played, total bets placed, wins and losses, full transaction history.
• Technical data: IP address, device type, operating system, web browser type, language settings and screen resolution.
• Location data: Approximate location based on IP address, for the purpose of regional eligibility verification.
• Cookie data: Information collected through cookies and similar tracking technologies as described in Section 8.

How We Collect Data

Bossku collects personal data through the following channels:

1. Registration form: When you register a Bossku account for the first time, you provide the basic information needed to create your account.
2. Financial transactions: Every time you make a deposit via Touch 'n Go, GrabPay, DuitNow or FPX, our system records the transaction details for financial accountability and security purposes.
3. Gaming activity: Every in-game action — every slots spin, every blackjack hand, every football bet — is recorded by the system for fairness and dispute resolution purposes.
4. Customer support sessions: When you reach out to our support team via live chat or email, those interactions are recorded to help us resolve issues more effectively.
5. Automated technologies: Our servers automatically log technical information such as your IP address and browser type each time you access the platform.
6. Identity verification process: When you submit identity documents for account verification or large withdrawals, we record the relevant information.

How We Use Your Personal Data

Bossku uses the personal data it collects solely for the following legitimate and stated purposes:

• Account management: To create, verify, manage, and secure your Bossku account, including processing logins and OTP verification.
• Transaction processing: To process your deposits and withdrawals via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, CIMB Clicks, and other Malaysian payment methods you use.
• Game maintenance: To ensure fair gameplay, resolve any disputes relating to game outcomes, and maintain a history of your betting records.
• Customer support: To enable our support team to resolve your queries and issues efficiently and effectively.
• Fraud prevention: To identify and prevent fraudulent activity, money laundering, hacking, and system abuse.
• Legal compliance: To comply with applicable Malaysian legal requirements, including anti-money laundering (AML) obligations and customer identity verification (KYC).
• Service communications: To send you important account-related notifications such as deposit confirmations, withdrawal status updates, security alerts, and changes to our Terms & Conditions or Privacy Policy.
• Marketing communications: To send information about Bossku promotions, bonuses, and special offers — only to players who have given consent to receive such communications. You may withdraw this consent at any time.
• Platform improvement: To analyse aggregated (not individual) usage patterns in order to improve the user experience and performance of the Bossku platform.

Bossku will not use your personal data for any purpose other than those stated above without first obtaining your consent.

Sharing Data with Third Parties

Bossku does not sell, rent, or disclose your personal data to third parties for marketing purposes. However, in the following limited circumstances, we may need to share your data:

• Payment service providers: To process deposits and withdrawals, we are required to share relevant transaction details with payment service providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and the FPX network. This sharing is limited strictly to the information needed to complete each transaction.
• Game providers: To run certain games, basic game session information may be shared with the relevant game software provider. They are bound by strict confidentiality agreements with Bossku.
• Legal authorities: Where required by Malaysian law or a valid court order, Bossku will disclose the necessary data to the relevant authorities. We will notify you of any such disclosure unless prohibited from doing so by law.
• Auditors and professional advisors: Independent auditors, lawyers or accountants involved in Bossku's operations may have limited access to certain data, subject to their professional confidentiality obligations.
• Business transfers: If Bossku is involved in a merger, acquisition, or asset sale, player data may be transferred as part of the business assets. Players will be notified in advance of any such transfer and will have the right to object.

Data Security Measures

Bossku continually invests in security infrastructure to ensure your personal data remains protected at all times. Our key security measures include:

• 256-bit SSL encryption: All communications between your device and Bossku's servers are encrypted using TLS 1.3 with 256-bit encryption — the highest standard currently available.
• Secure password storage: Your password is never stored in plain text. We use the bcrypt hashing algorithm with a random salt to keep your password secure even in the event of a data breach.
• Two-factor authentication (2FA): All logins require OTP verification via SMS to your registered Malaysian phone number — an extra layer of protection that keeps your account secure even if your password is compromised.
• Role-based access control: Only Bossku staff with a legitimate business need are granted access to player data, and only to the extent required for their specific responsibilities.
• Continuous monitoring: Our systems are monitored 24/7 by automated security tools that detect and alert on any suspicious activity in real time.
• Regular security audits: Bossku conducts regular penetration testing and security audits by independent cybersecurity firms to identify and address any vulnerabilities.

Even with all these measures in place, no system is 100% breach-proof. We encourage you to take your own precautions as well — such as using a strong password, not sharing it with anyone, and always logging out of your account when you are done playing.

Data Retention Period

Bossku retains your personal data only for as long as necessary to fulfil the purposes outlined in this Policy, or as required by Malaysian law:

• Active account data: For as long as your account remains active with Bossku.
• Data after account closure: Financial transaction records and compliance records are retained for 7 years after account closure, in accordance with Malaysian legal requirements relating to financial records and anti-money laundering.
• Support communication logs: Customer support session recordings are retained for 2 years for reference and dispute resolution purposes.
• Technical log data: Server logs and technical data are retained for 90 days for security monitoring and technical troubleshooting purposes.
• Marketing data: Marketing consent records and distribution lists are retained until you withdraw your consent, or for 2 years following the last active interaction.

Once the retention period has ended, your data will be permanently deleted or anonymised so that it can no longer be linked to you personally.

Cookies & Tracking Technologies

Bossku uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit a website.

Types of cookies we use:

• Essential cookies: Required for core platform functions such as maintaining your login session and remembering your language preferences. The platform will not work properly without these cookies.
• Performance cookies: Collecting information about how you use the platform — the most frequently visited pages, time spent and any errors encountered — to help us improve platform performance.
• Functional cookies: Remembering your saved preferences, such as your favourite bet size and display settings, to make your gaming experience more comfortable.
• Security cookies: Used to detect suspicious activity and protect your account from unauthorised access.

You can manage or delete cookies through your web browser settings. Please be aware, however, that disabling certain cookies may affect the functionality of the Bossku platform and your overall playing experience.

Your Rights Regarding Personal Data

As a registered Bossku player in Malaysia, you have the following rights regarding your personal data:

1. Right of Access: You have the right to request and receive a copy of the personal data we hold about you.
2. Right to Rectification: You have the right to request that we correct any personal data that is inaccurate or incomplete.
3. Right to Erasure: You have the right to request the deletion of your personal data in certain circumstances — for example, if the data is no longer needed for its original purpose. Please note that we may be required to retain certain data in order to meet our legal obligations.
4. Right to Restrict Processing: You have the right to request that we restrict how we process your data in certain circumstances — for example, while we are verifying the accuracy of your data.
5. Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time.
6. Right to Withdraw Consent: Where data processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

To exercise any of the rights above, please contact us by email at support@bossku.click by clearly stating your request. We will process your request within 14 working days from the date of receipt. For complex cases, we may require up to 30 days, and we will notify you if this is the case.

Children's Privacy

The Bossku platform is strictly for individuals aged 18 and above only. We do not knowingly collect, process or store personal data from individuals under the age of 18.

All players are required to confirm that they are 18 years of age or older at the point of registration. Bossku reserves the right to request proof of age at any time, and any account found to have been registered by an underage individual will be closed immediately.

If you are a parent or guardian and become aware that a minor under your care has registered an account with Bossku, please contact us immediately at support@bossku.click. We will investigate and close that account immediately, and delete all data associated with that individual.

Bossku takes child protection seriously and encourages parents to use parental control software on devices shared with children.

Amendments to the Privacy Policy

Bossku reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or technological developments. Any material amendments will be communicated to you via:

• SMS notification to your registered phone number.
• A clear notice on the Bossku platform's main page the next time you log in.
• Email notifications if you have signed up for email communications.

The "Updated" date at the top of this page will always reflect the date of the latest revision. We encourage you to review this Policy periodically to stay informed about how we protect your information.

Continued use of the Bossku platform after any amendments take effect will be considered your acceptance of the revised Privacy Policy. If you disagree with the changes made, you have the right to close your account and request deletion of your data in accordance with the rights set out in Section 9.

Contact Us About Privacy

If you have any questions, concerns or requests regarding this Privacy Policy or how Bossku handles your personal data, we encourage you to reach out to us directly:

• Email: support@bossku.click
• Live Chat: Available 24/7 via the chat button on the Bossku platform
• Response Time: We aim to respond to all privacy-related enquiries within 3 business days

Our support team is Malay-speaking and ready to help you understand your privacy rights and handle any data-related requests efficiently. You don't need to use formal language or legal terminology — simply explain what you need and we'll take it from there.

This Privacy Policy is governed by and construed in accordance with the laws of Malaysia, in particular the Personal Data Protection Act 2010 (PDPA) and its regulations. Any disputes relating to this Policy shall be resolved under the jurisdiction of Malaysian courts.