bossku8 Privacy Policy

1. Introduction

bossku8 ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of all members and visitors who access the bossku8 platform at bossku8.co. This Privacy Policy ("Policy") sets out in clear terms what personal data we collect, how we use it, who we may share it with, and what rights you hold in relation to that data.

This Policy applies to all personal data processed by bossku8 in connection with your use of our online casino, sportsbook, live dealer games, promotions, customer support services, and any other services we offer. By registering for a bossku8 account or by continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

If you have questions about anything in this Policy, please contact our data team at the details provided in Section 15 below.

2. Data We Collect

bossku8 collects personal data through several channels, including during account registration, during the use of Platform services, during payment processing, and through automated technical means. The categories of personal data we may collect include:

2.1 Identity & Contact Data

• Full legal name as it appears on your identity document.
• Date of birth (used to verify that you meet the 21+ age requirement).
• Residential address, including postcode, city (e.g. Kuala Lumpur, Penang, Johor Bahru), and state.
• Email address and mobile phone number.
• Government-issued identity document details (e.g. MyKad number, passport number) where provided for KYC verification.

2.2 Financial Data

• Payment method details (e.g. bank account details, Touch n Go eWallet ID, Boost account reference, GrabPay identifier) — sufficient to process transactions but not stored in full card or account number form.
• Transaction history including deposit amounts, withdrawal requests, dates, and payment methods used.
• Wagering history and account balance records.

2.3 Technical & Usage Data

• IP address, browser type, and operating system.
• Device identifiers and mobile network information.
• Pages visited, session duration, clickstream data, and game play logs.
• Login timestamps and geographic location data derived from IP address.
• Cookie and tracking data as described in Section 7.

2.4 Communications Data

• Records of live chat, email, and any other communications between you and bossku8 support.
• Feedback, survey responses, and complaints submitted to bossku8.

3. How We Use Your Data

bossku8 processes personal data for the following purposes:

• Account Management: To create, maintain, and administer your bossku8 member account, including verifying your identity and eligibility.
• Service Delivery: To provide the casino, sportsbook, live dealer, and all other gaming services available on the Platform.
• Payment Processing: To process deposits and withdrawals through your chosen Malaysian payment method (Touch n Go, Boost, Maybank, CIMB, etc.) and to maintain financial records.
• Regulatory Compliance: To meet anti-money laundering (AML), know-your-customer (KYC), and responsible gaming obligations imposed by bossku8's licensing authority.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account abuse, money laundering, and other prohibited conduct.
• Customer Support: To respond to queries, resolve disputes, and provide technical assistance.
• Platform Improvement: To analyse usage patterns and technical performance in order to improve the Platform's functionality and user experience.
• Marketing Communications: To send you promotional offers, bonus notifications, and updates about new games or features — only where you have provided consent or where this is permitted under applicable law.
• Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling and to apply any responsible gaming restrictions you have requested.

4. Legal Basis for Processing

bossku8 processes personal data on the following legal grounds:

• Contractual Necessity: Processing that is necessary to perform the contract with you — i.e., to provide the gaming services you have registered for.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML/KYC requirements and licensing conditions.
• Legitimate Interests: Processing for fraud prevention, security, platform improvement, and internal analytics where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and certain cookie categories, where your explicit consent has been obtained and can be withdrawn at any time.

5. Sharing of Personal Data

bossku8 does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: Including banks and e-wallet providers such as Maybank, CIMB, Hong Leong Bank, Public Bank, Touch n Go eWallet, Boost, and GrabPay, to process your financial transactions.
• Identity Verification Services: Third-party KYC and AML screening providers used to verify your identity and screen against sanctions and politically exposed persons lists.
• Game Software Providers: Licensed game studios (e.g. PG Soft, Pragmatic Play, Evolution Gaming) may receive limited gameplay data necessary to provide and maintain their games on the Platform.
• Regulatory Authorities: bossku8's licensing authority and other regulatory bodies as required by law or as directed by a lawful order.
• Professional Advisers: Lawyers, auditors, and accountants subject to professional confidentiality obligations.
• IT & Security Providers: Technology partners who host, maintain, and secure the Platform infrastructure, subject to strict contractual data protection obligations.
• Law Enforcement: Where required by a valid legal process, court order, or where disclosure is necessary to prevent serious harm.

Any third party with whom we share personal data is required to process it lawfully, in accordance with applicable data protection principles, and only for the specific purposes for which it was shared.

6. Data Retention

bossku8 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specific retention periods include:

• Account data and transaction records: Retained for a minimum of five (5) years from the date of account closure, in accordance with AML regulatory requirements.
• KYC documentation: Retained for five (5) years from the date of the last transaction or account closure, whichever is later.
• Customer support communications: Retained for two (2) years from the date of the last communication.
• Marketing consent records: Retained for as long as the consent remains active, plus three (3) years following withdrawal of consent.
• Technical and usage logs: Retained for up to twelve (12) months from collection, subject to aggregation or anonymisation for statistical purposes.

When personal data is no longer required, it is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

7. Cookies & Tracking Technologies

bossku8 uses cookies and similar tracking technologies (including local storage, pixel tags, and session storage) to operate the Platform and improve your experience. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function correctly — including session management, authentication, and fraud prevention. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and previously accessed games.
• Analytics Cookies: Collect anonymised information about how visitors use the Platform to help us improve performance and content. This data is aggregated and does not identify individual users.
• Marketing Cookies: Used to deliver relevant promotional content on the Platform. These are only activated where you have provided consent.

You may manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the bossku8 Platform.

8. Security Measures

bossku8 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL (Secure Socket Layer) encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data fields at rest in our databases.
• Strict role-based access controls limiting internal access to personal data to authorised personnel only.
• Regular security assessments, penetration testing, and vulnerability scanning of Platform infrastructure.
• Multi-factor authentication options available to members for account access.
• Comprehensive audit logging of access to personal data and system events.

Notwithstanding these measures, no internet transmission or electronic storage is 100% secure. bossku8 cannot guarantee absolute security of your data. In the event of a data security incident that affects your rights, bossku8 will notify you and relevant regulatory authorities in accordance with applicable legal requirements.

9. Your Rights

Subject to applicable law and certain exceptions, you hold the following rights with respect to your personal data held by bossku8:

• Right of Access: You may request a copy of the personal data bossku8 holds about you.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to bossku8's legal retention obligations.
• Right to Restriction of Processing: You may request that bossku8 restrict processing of your personal data in certain circumstances.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request a machine-readable copy of your personal data.
• Right to Object: You may object to processing based on legitimate interests, including profiling for marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact bossku8 at the details in Section 15. We will respond to verified requests within thirty (30) days. We may need to verify your identity before processing certain requests.

10. Children's Privacy

The bossku8 Platform is strictly intended for individuals aged 21 years and above. bossku8 does not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been collected from an individual under this age threshold, we will take immediate steps to delete that data and close the associated account.

If you believe that a minor has accessed the Platform or provided personal data, please contact us immediately at the details in Section 15.

11. Third-Party Links

The bossku8 Platform does not contain links to external third-party websites. All links within the Platform navigate to internal pages at bossku8.co. This Policy applies solely to data processed by bossku8 through the Platform. bossku8 is not responsible for the privacy practices of any third-party services that may be referenced in passing or accessed independently by users outside the Platform.

12. Marketing Communications

With your consent, bossku8 may contact you with promotional offers, bonus notifications, new game announcements, and other marketing materials via email or in-Platform notifications. You may opt out of marketing communications at any time by:

• Adjusting your communication preferences in your bossku8 account settings.
• Clicking the unsubscribe link in any marketing email received from bossku8.
• Contacting bossku8 customer support and requesting removal from marketing lists.

Please note that opting out of marketing communications will not affect service-related communications that bossku8 is required to send you (e.g. account verification, transaction confirmations, security alerts, regulatory notices).

13. International Data Transfers

bossku8 operates a platform that serves Malaysian users (including players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and across Malaysia). Some of our service providers and technology partners may process personal data in jurisdictions outside Malaysia. Where personal data is transferred internationally, bossku8 ensures that appropriate safeguards are in place — such as standard contractual clauses, data processing agreements, or reliance on adequacy determinations — to ensure your data receives a level of protection equivalent to that required under applicable data protection law.

14. Changes to This Policy

bossku8 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform functionality. When material changes are made, we will update the "Last Updated" date at the top of this Policy and, where appropriate, notify registered members via email or in-Platform notification.

Your continued use of the bossku8 Platform following any update to this Policy constitutes your acceptance of the revised version. We encourage you to review this Policy periodically to stay informed about how bossku8 handles your personal data.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the personal data bossku8 holds about you, please contact our support team through the following:

• Email: [email protected]
• Live Chat: Available 24/7 on the Platform

bossku8 will acknowledge data-related requests within five (5) business days and aims to resolve them within thirty (30) days. For complex requests, we may extend this period by an additional thirty (30) days, in which case we will notify you of the extension and the reason for it.