Privacy Policy – bossku8

1. Introduction

This Privacy Policy ("Policy") describes how bossku8 ("bossku8", "we", "us", "our") collects, uses, discloses, stores, and protects the personal data of individuals ("you", "User", "Member") who register for or use the bossku8 platform, accessible at bossku8.club and through the bossku8 mobile application.

bossku8 is committed to protecting your privacy and handling your personal data with care, integrity, and transparency. This Policy is intended to satisfy the disclosure obligations applicable to bossku8 under relevant data protection legislation, including principles aligned with the Malaysia Personal Data Protection Act 2010 ("PDPA") and international data protection standards.

By registering for a bossku8 Account or by continuing to use the bossku8 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the bossku8 Platform.

2. Data Controller

bossku8 is the data controller responsible for the personal data collected through the bossku8 Platform. As data controller, bossku8 determines the purposes and means by which personal data is processed. Questions or requests relating to your personal data should be directed to bossku8 using the contact details in Section 17 of this Policy.

3. Data We Collect

bossku8 collects the following categories of personal data from Members and Platform users:

3.1 Identity & Contact Data

• Full legal name as stated on your identity document;
• Date of birth and age verification confirmation;
• Malaysian identity card number (MyKad) or passport number (for KYC purposes);
• Email address;
• Mobile phone number;
• Residential address.

3.2 Account & Financial Data

• bossku8 Account username and password (stored in hashed form);
• Account transaction history, including all deposits, withdrawals, and bonus credits;
• Payment method details — e-wallet account identifiers (Touch n Go, Boost, GrabPay), bank account details (Maybank, CIMB, Public Bank), and cryptocurrency wallet addresses where applicable;
• KYC verification documents and verification status.

3.3 Gaming Activity Data

• Game session logs, including games played, bet amounts, results, and session duration;
• Sportsbook betting history, including events wagered on, stake amounts, and outcomes;
• Responsible gaming tool settings, including any deposit limits, session limits, or self-exclusion requests.

3.4 Technical & Usage Data

• IP address and geolocation data at the time of login and transactions;
• Device identifiers, browser type, operating system, and screen resolution;
• Platform navigation and clickstream data;
• App version and mobile device model (for Android app users);
• Login timestamps and session duration.

3.5 Communications Data

• Records of communications with bossku8 customer support, including live chat transcripts and email correspondence;
• Responses to surveys, feedback forms, or promotional participation.

4. How We Collect Your Data

bossku8 collects personal data through the following means:

• Direct collection: Data you provide when registering for a bossku8 Account, completing KYC verification, making deposits or withdrawal requests, contacting support, or participating in promotions;
• Automated collection: Technical and usage data collected automatically when you access the Platform, through server logs, cookies, and similar tracking technologies;
• Third-party sources: Identity and age verification data from authorised KYC service providers; fraud screening data from payment processors; geolocation data from IP intelligence services.

5. How We Use Your Data

bossku8 uses the personal data collected for the following purposes:

• Account administration: Creating and managing your bossku8 Account, verifying your identity and age, and administering your gaming activity;
• Transaction processing: Processing deposits, withdrawals, and bonus credits; preventing and detecting payment fraud;
• Platform operation: Delivering gaming services, resolving technical issues, and maintaining Platform security and integrity;
• Regulatory compliance: Meeting anti-money laundering (AML) obligations, KYC verification requirements, and responsible gaming obligations under applicable gaming authority standards;
• Customer support: Responding to your enquiries, resolving disputes, and providing technical assistance;
• Responsible gaming: Monitoring account activity for indicators of problem gambling and applying protective measures including deposit limits, self-exclusion, and cooling-off periods;
• Marketing (with consent): Sending promotional communications about bossku8 offers, new games, and Platform updates, subject to your marketing preferences;
• Analytics and improvement: Analysing Platform usage patterns to improve user experience, game selection, and support service quality.

6. Legal Basis for Processing

bossku8 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and bossku8, including Account management, transaction processing, and gaming service delivery;
• Legal obligation: Processing required to comply with applicable legal obligations, including AML regulations, KYC requirements, and gaming authority compliance;
• Legitimate interests: Processing necessary for bossku8's legitimate operational interests, including fraud prevention, Platform security, and service improvement, where these interests are not overridden by your rights;
• Consent: Processing based on your explicit consent, including marketing communications. Consent-based processing may be withdrawn at any time.

7. Data Sharing & Disclosure

bossku8 does not sell your personal data to any third party. bossku8 may disclose your personal data to the following categories of recipients in the course of operating the Platform:

• Payment processors and e-wallet providers: Including Touch n Go, Boost, GrabPay, and banking partners, for the purpose of processing deposits and withdrawals;
• KYC and identity verification providers: Third-party service providers authorised to perform identity document verification and age confirmation;
• Game content providers: Game studios and aggregators whose titles are available on the bossku8 Platform may receive game session data for game integrity and audit purposes;
• Fraud prevention and security services: Providers of IP intelligence, device fingerprinting, and fraud detection services;
• Regulatory and law enforcement authorities: Where bossku8 is legally required to disclose information by applicable law, court order, or regulatory direction;
• Professional advisers: Legal, accounting, and auditing firms engaged by bossku8 under applicable confidentiality obligations.

All third-party service providers engaged by bossku8 are contractually required to process personal data only as instructed by bossku8 and to maintain appropriate data security standards.

8. Cookies & Tracking Technologies

bossku8 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help bossku8 recognise returning users, maintain secure login sessions, remember your preferences, and analyse Platform usage.

bossku8 uses the following categories of cookies:

• Essential cookies: Required for the Platform to function, including session authentication cookies and security tokens. These cannot be disabled without affecting Platform functionality;
• Analytics cookies: Used to collect aggregated usage data to improve Platform performance and user experience;
• Preference cookies: Used to remember your settings and preferences across sessions.

You may control non-essential cookies through your browser settings. Disabling essential cookies will impair your ability to use the bossku8 Platform, including the login and gaming functions.

9. Data Security

bossku8 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption of all data transmitted between your device and the bossku8 servers;
• Encryption of sensitive data fields — including passwords and payment identifiers — at rest;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security audits and penetration testing of Platform infrastructure;
• Automated anomaly detection systems for unusual login or transaction activity.

While bossku8 takes all reasonable measures to protect your data, no transmission over the internet or electronic storage system is completely secure. bossku8 cannot guarantee absolute security, and Members are responsible for maintaining the confidentiality of their own Account credentials.

10. Data Retention

bossku8 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting obligations. Specifically:

• Account and transaction records are retained for a minimum of five (5) years following Account closure or the last transaction, in accordance with AML record-keeping obligations;
• KYC documents are retained for a minimum of five (5) years following the completion of the business relationship;
• Support communications are retained for a period of two (2) years following resolution;
• Technical and usage logs are typically retained for a maximum of twelve (12) months unless required for ongoing dispute resolution or security investigations.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

11. Your Rights

Subject to applicable data protection law, you have the following rights in relation to your personal data held by bossku8:

• Right of Access: You may request a copy of the personal data bossku8 holds about you;
• Right of Rectification: You may request correction of inaccurate or incomplete personal data;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations;
• Right to Restrict Processing: You may request that bossku8 restrict the processing of your personal data in certain circumstances;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of prior processing;
• Right to Complain: You have the right to lodge a complaint with the relevant data protection authority if you believe your personal data has been processed unlawfully.

To exercise any of these rights, please contact bossku8 using the details in Section 17. bossku8 will respond to verified requests within a reasonable period in accordance with applicable law. bossku8 may require verification of your identity before processing rights requests.

12. Marketing Communications

With your consent, bossku8 may send you promotional communications about new games, platform promotions, bonus offers, and bossku8 news via email or in-platform notifications. You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in your bossku8 Account Settings; or
• Contacting bossku8 support with a request to opt out of marketing communications.

Withdrawal of marketing consent does not affect the delivery of transactional communications such as deposit confirmations, withdrawal notifications, and security alerts, which are sent as part of the Account service.

13. Children's Privacy

The bossku8 Platform is strictly for users aged 21 years and above. bossku8 does not knowingly collect personal data from individuals under the age of 21. If bossku8 becomes aware that personal data has been collected from a person under 21, that Account will be immediately suspended, the data will be reviewed, and appropriate action will be taken in accordance with our age verification procedures and these Terms.

If you believe a person under the age of 21 has registered for a bossku8 Account, please contact bossku8 support immediately.

14. Third-Party Links

The bossku8 Platform does not contain links to external third-party websites. This Privacy Policy applies solely to data collected through the bossku8 Platform (bossku8.club and the bossku8 mobile application). bossku8 is not responsible for the privacy practices of any third-party services or applications that may be accessed independently of the Platform.

15. International Data Transfers

In the course of operating the bossku8 Platform, your personal data may be transferred to and processed in jurisdictions outside Malaysia. Where such transfers occur, bossku8 ensures that appropriate safeguards are in place to protect your data, including contractual protections with data recipients that meet or exceed the standards required under applicable data protection law.

16. Changes to This Privacy Policy

bossku8 reserves the right to update or amend this Privacy Policy at any time. Material changes to this Policy will be communicated to Members via email or via a prominent notice on the Platform prior to the changes taking effect. The "Last updated" date at the top of this page reflects the most recent revision. Your continued use of the bossku8 Platform following notification of changes constitutes your acceptance of the revised Policy.

We recommend reviewing this Privacy Policy periodically to stay informed of how bossku8 is protecting your data.

17. Contact Us

For questions, requests, or concerns relating to this Privacy Policy or the handling of your personal data by bossku8, please contact our data protection team at:

For general account and support enquiries, please use the live chat function available within the bossku8 Platform or visit our FAQ page.