boss188 Privacy Policy – How We Handle Your Personal Data

1. Introduction

1.1 boss188 is committed to protecting the privacy and personal data of all players who use our online casino, sportsbook, slots, and gaming services in Malaysia and elsewhere. We recognise that the information you share with us is sensitive and we treat it with the highest level of care and confidentiality.

1.2 This Policy applies to all personal data collected through boss188.club, including data provided during account registration, during gameplay, during financial transactions, and through interactions with our customer support team.

1.3 Our data practices are designed to be consistent with applicable privacy regulations and international gaming authority data protection standards. Where Malaysian data protection requirements apply, we honour those obligations fully.

2. Data We Collect

2.1 Registration Data. When you create a boss188 account, we collect your full name, date of birth, email address, residential address, phone number, and preferred currency (MYR). This information is required to establish and verify your account.

2.2 Identity Verification (KYC) Data. To comply with anti-money laundering regulations and international gaming authority requirements, boss188 may collect copies of government-issued identification (such as your MyKad or passport), proof of residential address, and payment method verification documents.

2.3 Financial Data. We collect records of all deposits, withdrawals, and gaming transactions on your boss188 account, including the payment method used (e.g. Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank), transaction amounts in MYR, timestamps, and reference numbers. We do not store full card or bank account numbers — payment processing is handled by certified third-party payment processors.

2.4 Gaming Activity Data. We collect records of your gameplay on boss188, including games played, wagers placed, session durations, bonuses claimed, and wagering history. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

2.5 Technical & Device Data. We automatically collect device type, operating system, browser type, IP address, session data, and geolocation information when you access boss188. This data is used for security monitoring, fraud prevention, and platform optimisation.

2.6 Communications Data. If you contact boss188 customer support via live chat or email, we retain records of those communications for quality assurance, dispute resolution, and training purposes.

2.7 Preference Data. We collect data about your preferences, settings, and interactions with the boss188 platform interface to personalise your user experience.

3. How We Use Your Data

3.1 boss188 uses the personal data we collect for the following purposes:

• Account Management: To register, verify, maintain, and manage your boss188 player account;
• Service Delivery: To provide access to games, process deposits and withdrawals in MYR, and facilitate all gaming services;
• Identity Verification: To comply with Know Your Customer (KYC) obligations and anti-money laundering regulations;
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, multi-accounting, and unauthorised access;
• Responsible Gaming: To monitor gameplay patterns and apply responsible gaming tools where indicators of problematic gambling behaviour are detected;
• Regulatory Compliance: To meet reporting and record-keeping obligations under international gaming authority requirements;
• Communications: To send you account notifications, transaction confirmations, promotional offers, and service updates (where you have consented to marketing communications);
• Customer Support: To respond to your enquiries and resolve account issues;
• Platform Improvement: To analyse usage patterns and improve boss188's functionality, game library, and user experience.

4. Legal Basis for Processing

4.1 boss188 processes personal data on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform the contract between you and boss188, including account registration, payment processing, and provision of gaming services;
• Legal Obligation: Processing is required to comply with applicable regulatory, anti-money laundering, and gaming authority obligations;
• Legitimate Interests: Processing is necessary for boss188's legitimate interests in fraud prevention, security, and platform improvement, provided such interests are not overridden by your fundamental rights;
• Consent: For optional marketing communications and non-essential cookies, processing is based on your explicit consent, which you may withdraw at any time.

5. Sharing Your Personal Data

5.1 boss188 does not sell your personal data to third parties. We may share your data with the following categories of recipients only to the extent necessary:

• Payment Processors: Certified Malaysian and international payment service providers (including those facilitating Touch 'n Go, DuitNow, and FPX transactions) receive transaction data necessary to process your deposits and withdrawals;
• Game Providers: Licensed third-party game studios operating within the boss188 platform may receive session identifiers and wager data necessary to run their games;
• Regulatory Authorities: We may disclose player data to gaming regulators, financial intelligence units, or law enforcement agencies where required by law or court order;
• KYC/AML Service Providers: Identity verification specialists who assist boss188 with document verification and anti-money laundering screening;
• Technology Service Providers: Cloud hosting, security monitoring, and analytics providers who process data on our behalf under strict contractual data protection obligations.

5.2 All third-party service providers engaged by boss188 are contractually required to process personal data only for the specified purpose, to implement appropriate security measures, and to comply with applicable data protection laws.

6. Cookies & Tracking Technologies

6.1 boss188 uses cookies and similar tracking technologies to operate the platform effectively and to improve your experience. The types of cookies we use include:

• Essential Cookies: Required for the platform to function, including session authentication and security tokens. These cannot be disabled;
• Functional Cookies: Remember your preferences such as language settings, game lobby filters, and display preferences;
• Analytics Cookies: Collect anonymised data about how players navigate boss188 to help us improve the platform;
• Security Cookies: Assist in fraud detection and account protection.

6.2 You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may impact the functionality of the boss188 platform.

7. Data Retention

7.1 boss188 retains personal data for as long as your account remains active and for a period thereafter as required by regulatory obligations. Specifically:

• Account and identity verification records are retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements;
• Transaction records are retained for a minimum of five (5) years;
• Customer support communications are retained for three (3) years;
• Gaming activity logs are retained for five (5) years for regulatory and dispute resolution purposes.

7.2 Following the expiry of mandatory retention periods, personal data will be securely deleted or anonymised.

8. Data Security

8.1 boss188 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit;
• Encryption of sensitive data at rest, including passwords (stored as salted hashes) and financial records;
• Access controls limiting employee access to personal data on a need-to-know basis;
• Regular security audits and penetration testing;
• Intrusion detection systems and 24/7 security monitoring.

8.2 While boss188 employs robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately of any suspected unauthorised access.

9. Your Data Rights

9.1 Subject to applicable law and regulatory obligations, you have the following rights in relation to your personal data held by boss188:

• Right of Access: You may request a copy of the personal data boss188 holds about you;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to regulatory retention requirements;
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances;
• Right to Data Portability: You may request a copy of data you have provided to boss188 in a structured, machine-readable format;
• Right to Object: You may object to processing based on legitimate interests, and to the use of your data for direct marketing purposes;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

9.2 To exercise any of these rights, please contact boss188 via email at [email protected] or through the live chat facility in your account dashboard. We will respond to all valid requests within 30 days.

10. Children's Privacy

10.1 The boss188 platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from persons under 21 years of age. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete that data and close the associated account.

10.2 If you believe that a minor has created a boss188 account or provided personal data to us, please contact our support team immediately at [email protected].

11. Third-Party Links & Services

11.1 The boss188 platform may incorporate third-party game software and services. These third parties operate under their own privacy policies, which are independent of this Policy. boss188 is not responsible for the privacy practices of third-party game providers or payment processors beyond the contractual data protection obligations we impose upon them.

11.2 boss188 does not embed social media tracking pixels, third-party advertising trackers, or unrelated analytics services on the platform.

12. International Data Transfers

12.1 Your personal data may be processed by boss188 or its authorised service providers in locations outside Malaysia. In such cases, boss188 ensures that appropriate safeguards are in place — including contractual data protection clauses — to protect your data to a standard equivalent to that required under applicable Malaysian and international regulations.

13. Changes to This Privacy Policy

13.1 boss188 reserves the right to update this Privacy Policy at any time. Any changes will be published on this page with a revised effective date. Where changes are material, we will notify registered players by email or through an on-platform notification.

13.2 Your continued use of boss188 following publication of an updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with any changes, you must cease using the platform and may request account closure.

14. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or boss188's data practices, please contact our Data Protection team:

• Email: [email protected]
• Live Chat: Available 24/7 within your boss188 account dashboard
• Response Time: Within 30 days for data rights requests; within 24 hours for general enquiries

Malaysian players with concerns about data handling who are not satisfied with our response may contact the relevant national regulatory authority or seek independent legal advice.