Privacy Policy – bossku Online Gaming Platform

Last updated: 1 January 2026

1. Introduction

This Privacy Policy ("Policy") describes how bossku ("the Company", "bossku", "we", "us", "our"), the operator of the online gaming platform at bossku.one ("the Platform"), collects, uses, stores, discloses, and protects the personal data of individuals who access or use the Platform ("Members", "Users", "you"). This Policy forms an integral part of the bossku Terms & Conditions.

By registering for a bossku account or by continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree to this Policy, you must discontinue use of the Platform immediately.

bossku is committed to protecting the privacy and security of all members across Malaysia — from Kuala Lumpur and Penang to Johor Bahru and Kota Kinabalu — and to handling personal data with the care and transparency it deserves.

2. Information We Collect

bossku collects personal data through several channels in connection with the operation of the Platform. The categories of data collected include:

2.1 Registration and Account Data

When you create a bossku account, we collect the information you provide during registration, including but not limited to: full legal name, date of birth, email address, phone number, country of residence, and preferred currency (MYR). This information is required to create and verify your account and to comply with our age verification obligations (21+ only).

2.2 Identity Verification (KYC) Data

To comply with our international gaming authority licensing requirements and applicable anti-money-laundering (AML) laws, bossku may require you to submit copies of government-issued identity documents (such as MyKad, passport, or driving licence) and proof of address. KYC documents are processed securely and retained only for as long as required by our regulatory obligations.

2.3 Financial Data

bossku collects transaction data relating to deposits and withdrawals made through the Platform, including the payment method used (e.g., Touch n Go eWallet, Boost, Maybank2u, CIMB Clicks, Public Bank, FPX), transaction amounts in MYR, and timestamps. bossku does not store full payment card numbers or full e-wallet credentials on its servers.

2.4 Gaming Activity Data

bossku records data relating to your gaming activity on the Platform, including games played, bet amounts, winnings, and session durations. This data is used for account management, responsible gaming monitoring, bonus eligibility assessment, and regulatory reporting purposes.

2.5 Technical and Device Data

When you access the bossku Platform, we automatically collect certain technical data, including: IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, and session duration. This data is used to maintain Platform security, detect fraud, and improve the user experience.

2.6 Communications Data

If you contact bossku via Live Chat, email, or WhatsApp (available through the member account area), we retain records of those communications for quality assurance, dispute resolution, and regulatory compliance purposes.

3. How We Use Your Information

bossku uses the personal data we collect for the following purposes:

• Account management: To create, maintain, verify, and manage your bossku member account;
• Service delivery: To provide access to the gaming, betting, and casino services offered on the Platform;
• Payment processing: To process deposits and withdrawals in MYR through your selected payment method;
• Identity and age verification: To verify that you meet the 21+ age requirement and satisfy our KYC obligations under our gaming licence;
• Regulatory compliance: To comply with our obligations under applicable gaming, AML, and data protection laws and our international gaming authority licence conditions;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, and other prohibited activities;
• Responsible gaming: To monitor gaming behaviour and intervene where patterns suggest a member may be experiencing gambling-related harm, in accordance with our responsible gaming obligations;
• Customer support: To respond to your enquiries, complaints, and requests;
• Marketing communications: With your consent, to send you information about bossku promotions, bonuses, and new games. You may opt out at any time;
• Platform improvement: To analyse usage patterns and improve the functionality, performance, and content of the bossku Platform.

4. Disclosure of Personal Data

bossku does not sell, rent, or trade your personal data to third parties for their own commercial purposes. However, we may disclose your personal data to the following categories of recipients where necessary to operate the Platform and fulfil our obligations:

• Game providers and technology partners: Licensed software providers whose games are accessible via bossku may receive limited session data necessary to operate their games within the Platform environment;
• Payment processors: We share transaction data with payment service providers (including Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and FPX) as required to process your deposits and withdrawals;
• Regulatory and law enforcement authorities: bossku will disclose personal data to gaming regulators, financial intelligence units, law enforcement agencies, and courts where required by law or by our licensing obligations;
• KYC and fraud prevention services: Third-party identity verification and fraud detection providers engaged by bossku to assist with KYC screening and AML monitoring;
• Professional advisers: Legal, accounting, and audit firms engaged by bossku, subject to professional confidentiality obligations.

All third parties with whom bossku shares personal data are required to handle that data securely and in accordance with applicable data protection laws.

5. Data Retention

bossku retains your personal data for as long as your account remains active and for a further period as required by our licensing obligations, applicable AML laws, and other regulatory requirements. Typically, this means transactional and KYC records are retained for a minimum of five (5) years following account closure, or longer where required by applicable law. When personal data is no longer required for any lawful purpose, bossku will securely delete or anonymise it.

6. Cookies and Tracking Technologies

The bossku Platform uses cookies — small text files stored on your device — and similar tracking technologies for the following purposes:

• Essential cookies: Required to operate core Platform functions such as login session management and security. These cannot be disabled without affecting Platform functionality;
• Performance cookies: Used to collect anonymised data about how members use the Platform, helping bossku identify areas for improvement;
• Preference cookies: Used to remember your settings and preferences (such as language and display preferences) between sessions.

You may control cookie settings through your browser. Disabling essential cookies may impair your ability to use certain Platform features, including the bossku login function. bossku does not use third-party advertising cookies or behavioural tracking technologies for the purposes of targeted advertising on external sites.

7. Data Security

bossku implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, role-based access controls limiting staff access to personal data on a need-to-know basis, regular security audits and vulnerability assessments, and multi-factor authentication for administrative access to internal systems. While bossku takes all reasonable steps to protect your data, no online system can be guaranteed to be completely secure. You are responsible for maintaining the security of your own bossku account credentials.

8. Your Data Rights

Subject to applicable law and our regulatory retention obligations, bossku members have the following rights with respect to their personal data:

• Right of access: You may request a copy of the personal data bossku holds about you;
• Right of rectification: You may request correction of any inaccurate or incomplete personal data;
• Right of erasure: You may request deletion of your personal data, subject to our legal and regulatory retention obligations;
• Right to restrict processing: In certain circumstances, you may request that bossku restrict the processing of your personal data;
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time;
• Right to data portability: Where technically feasible, you may request a copy of your personal data in a commonly used machine-readable format.

To exercise any of these rights, please contact the bossku Data Protection team at [email protected]. bossku will respond to all valid requests within 30 days.

9. Children and Minors

The bossku Platform is strictly for individuals aged 21 and above. bossku does not knowingly collect personal data from persons under the age of 21. If bossku becomes aware that personal data has been collected from an underage individual, that data will be promptly deleted and the associated account terminated. If you believe that a minor has registered on the bossku Platform, please contact us immediately at [email protected].

10. Changes to This Policy

bossku reserves the right to update this Privacy Policy at any time. Material changes will be communicated to members via the registered email address associated with their bossku account or via a prominent notice on the Platform. Continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

11. Contact

If you have any questions, concerns, or requests relating to this Privacy Policy or to bossku's handling of your personal data, please contact us by email at [email protected] or via Live Chat available 24/7 from your member dashboard. bossku endeavours to respond to all privacy-related enquiries within 3 business days.