Privacy Policy Boss88 — Protection Data & Malaysian Player Privacy

This Privacy Policy is published by boss88 ("we", "Platform" or "boss88") and applies to all users who register, visit, or use the services provided through boss88.bz and any associated platforms.

We understand that trust is the foundation of the relationship between a platform and its users. When you register and play at boss88, you entrust us with your personal information. We take that trust seriously — and this Privacy Policy is our written commitment to you on how we manage that responsibility.

This document is written in plain language because we believe you deserve to know clearly what happens to your data — not buried in hard-to-read legal text. If you have any questions after reading it, the boss88 support team is ready to help.

Boss88 collects various types of personal data depending on your interactions with our platform. Below is an overview of the data categories we collect:

Data collected by boss88 is used exclusively for purposes related to platform operations and user experience. We do not use your data for any purpose not stated in this Privacy Policy.

The primary uses of your data by boss88 are as follows:

• Account management: To create, verify, and manage your account on the boss88 platform, including a secure login process.
• Transaction processing: To process deposits, withdrawals, and all financial transactions related to your account accurately and promptly.
• Identity verification (KYC): To meet regulatory requirements and ensure platform security by verifying player identities.
• Fraud detection: To detect and prevent fraudulent activity, money laundering, and platform abuse that could harm other players.
• Customer Support: To handle enquiries, complaints, and assistance requests you submit to the boss88 support team.
• Platform improvement: To analyse aggregated usage patterns in order to improve user experience, platform performance, and the game catalogue.
• Service communications: To send important notices related to your account, changes to terms, or relevant security information.
• Legal compliance: To fulfil legal and regulatory obligations applicable to platform operations.

Boss88 processes your personal data on valid legal grounds. Depending on the purpose of processing, the bases we rely on are:

• Contract performance: When data processing is necessary to fulfil our contractual obligations to you — such as processing withdrawals or managing your account.
• Legal obligation: When processing is required to comply with applicable legal or regulatory requirements, such as anti-money laundering (AML) and KYC obligations.
• Legitimate interests: When we have a legitimate interest in processing your data — such as fraud detection and platform security — provided that interest does not override your privacy rights.
• Consent: When you have given explicit consent to a specific type of processing, such as receiving marketing communications (if you choose to opt in).

Boss88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. However, in the course of operating the platform, we may share data with the following categories of third parties:

• Payment service providers: To process deposits and withdrawals securely. These providers are bound by strict confidentiality agreements and are only permitted to use data for payment processing purposes.
• Game providers: Game session data required to run games from providers such as Pragmatic Play, PG Soft, and others. Data is shared on a minimal, technically necessary basis only.
• Regulatory authority: When required by law or a valid authority directive, we will disclose the necessary data to the relevant regulatory body or law enforcement agency.
• Technology providers: Technical infrastructure services such as cloud services that store data under strict data processing agreements.

All third parties with whom we share data are bound by contractual agreements requiring them to process data in accordance with data protection standards equivalent to our own.

Boss88 continuously invests in security infrastructure to ensure your data is protected at all times. The technical and organisational security measures we apply include:

• 256-bit SSL/TLS encryption for all data communications between users and servers
• Encryption at rest for all sensitive data in our databases
• Role-based access control (RBAC) — only staff who require access to specific data to perform their duties are permitted to do so
• Two-factor authentication (2FA) for internal system access and as an option for player accounts
• 24/7 security monitoring with intrusion detection systems (IDS) and intrusion prevention systems (IPS)
• Regular penetration testing conducted by independent security experts
• Clear, well-trained incident response procedures to handle any data breach swiftly

Boss88 does not retain your personal data longer than necessary for the purpose for which it was collected. Retention periods depend on the type of data and applicable legal requirements:

• Active account data: Retained for as long as your account remains active on the boss88 platform.
• Financial and transaction data: Retained for 7 years after the last transaction, in accordance with financial and tax legal requirements.
• KYC Records: Retained for 5 years after account termination, in accordance with anti-money laundering (AML) compliance requirements.
• Access and activity logs: Retained for 12 months for security and fraud detection purposes.
• Customer support data: Retained for 3 years after case resolution.

Once the retention period expires, data will be securely deleted or anonymised so it can no longer be linked to your identity.

As a boss88 player and owner of your personal data, you have the following rights, which you may exercise at any time:

Boss88 uses cookies and similar tracking technologies to enhance user experience, maintain login sessions, and understand how our platform is used. The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functionality — including login authentication and session security. These cookies cannot be disabled as the platform will not function without them.
• Functional Cookies: Saves your preferences such as language, theme, and other platform settings for a more personalised experience. Can be disabled without affecting core functionality.
• Analytics Cookies: Collects aggregate information on how the platform is used to help us improve our services. Data is compiled in aggregate form and is not used to identify you personally.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality or user experience of the boss88 platform.

The boss88 platform is intended for users aged 18 and above only. We do not knowingly collect personal data from children or minors.

If we find that a child's personal data has been collected without proper age verification, we will immediately delete that data and close the account in question. Parents or guardians who become aware that their child has registered on our platform without consent are asked to contact us immediately.

In the course of platform operations, your personal data may be transferred to and processed in locations outside Malaysia. This occurs primarily in the context of cloud infrastructure services and international game providers.

When your data is transferred outside Malaysia, boss88 ensures that:

• Data recipients in other countries maintain an adequate level of data protection
• Appropriate data transfer agreements have been established to protect your privacy rights
• Transfers are carried out only to the extent necessary for legitimate purposes

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we manage your personal data, please contact the boss88 privacy team through our customer support channels, available 24 hours a day, 7 days a week.

Boss88 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. If significant changes are made to how we process your data, we will provide notice via your registered email or a prominent in-platform notice before those changes take effect.

We encourage you to review this Privacy Policy periodically. Your continued use of the boss88 platform after any changes take effect constitutes your acceptance of the updated policy.