boss188 Privacy Policy

This Privacy Policy ("Policy") is issued by boss188 ("we", "us", "our", "the Platform") and applies to all personal data processed in connection with your use of the boss188 website at boss188.co, including all associated services — the sportsbook, live casino, slots section, account management portal, customer support channels, and promotional communications (collectively, "the Service").

boss188 is committed to protecting the privacy and personal data of all individuals who interact with the Platform — including registered Members, website visitors, and prospective players from Malaysia and other jurisdictions. This Policy describes what personal data boss188 collects, why it is collected, how it is used, with whom it may be shared, and what rights you hold in relation to your personal data.

By accessing the boss188 website or registering a Member account, you acknowledge that you have read and understood this Policy. This Policy should be read alongside the boss188 Terms & Conditions, which govern the overall conditions of your use of the Service.

For the purposes of applicable data protection law, boss188 acts as the data controller in respect of personal data collected through the boss188 platform and its associated communications. As data controller, boss188 determines the purposes for which and the means by which your personal data is processed.

Where boss188 engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, and technology infrastructure suppliers — those parties act as data processors and are bound by contractual obligations to process data only on boss188's instructions and in accordance with applicable data protection standards.

For all data protection queries, requests to exercise your rights, or concerns regarding this Policy, Members and visitors may contact boss188 via the customer support live chat accessible through the account dashboard, or by email to the address published in the footer of this website.

boss188 collects the following categories of personal data in connection with the operation of the Service:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification details (e.g. Malaysian MyKad number, passport number) collected during account registration and KYC verification.
• Contact Data: Residential address in Malaysia or other jurisdiction of residence, email address, and mobile telephone number.
• Financial Data: Bank account details, e-wallet identifiers (e.g. Touch n Go eWallet, Boost), and transaction records including deposit amounts, withdrawal requests, and account balance history — all denominated in Malaysian Ringgit (MYR).
• Account & Activity Data: Username, account login history, session duration, game play records, betting history across sportsbook, live casino, and slots, and customer support interaction records.
• Technical Data: IP address, browser type and version, device type and operating system, referring URLs, and pages visited within the boss188 website.
• Communications Data: Records of communications between you and boss188 customer support, including live chat transcripts and email correspondence.
• Verification Documents: Copies of identity documents, proof of address, and payment method verification documents submitted in response to KYC requirements.

boss188 does not intentionally collect special categories of sensitive personal data (such as health data, racial or ethnic origin, or political opinions) unless specifically required by applicable regulatory obligations, in which case such collection will be clearly notified to the individual concerned.

boss188 collects personal data through the following means:

• Direct Collection: Information you provide when registering a boss188 account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical data collected automatically when you access the boss188 website, including through cookies, web beacons, and server logs. See Section 10 for further details on cookies.
• Third-Party Sources: Identity verification and fraud prevention data from licensed third-party KYC and anti-money laundering (AML) service providers; payment data from Malaysian payment processors including those facilitating Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank transactions.
• Publicly Available Sources: In limited circumstances relevant to fraud prevention or AML obligations, boss188 may supplement personal data with information obtained from publicly available official registers or sanctions databases.

boss188 processes personal data only where a lawful basis exists. The following table summarises the primary purposes for which boss188 processes personal data and the corresponding legal basis:

• Account Registration & Service Delivery: Processing is necessary for the performance of the contract between boss188 and the Member (provision of the Service).
• Identity Verification & KYC: Processing is necessary to comply with boss188's legal obligations under applicable anti-money laundering and gaming regulatory requirements.
• Payment Processing: Processing is necessary for the performance of the contract (facilitating MYR deposits and withdrawals).
• Fraud Prevention & Security: Processing is necessary for the purposes of boss188's legitimate interests in preventing fraud, unauthorised account access, and financial crime.
• Responsible Gaming Compliance: Processing is necessary to comply with legal obligations related to the prevention of problem gambling, including the enforcement of the 21+ age restriction and self-exclusion programmes.
• Marketing & Promotions: Where you have consented to receive promotional communications, boss188 will use your contact data to send relevant offers. Consent may be withdrawn at any time via your account settings or by contacting customer support.
• Platform Improvement: Processing technical and activity data for the legitimate interest of improving the boss188 platform, fixing technical issues, and enhancing the user experience for Malaysian Members.

boss188 does not sell, rent, or trade personal data to third parties for their own independent marketing purposes. Personal data may be disclosed to the following categories of recipients where necessary for the purposes described in this Policy:

• Payment Service Providers: Malaysian payment processors facilitating MYR transactions, including operators of Touch n Go eWallet, Boost, and bank transfer services via Maybank, CIMB, and Public Bank.
• Identity Verification Providers: Third-party KYC and AML service providers engaged to verify Member identity and conduct fraud and sanctions screening as required by licensing obligations.
• Game Technology Providers: Platform technology and live casino studio providers whose software powers the boss188 game library. These providers may receive limited technical session data necessary for game delivery.
• Regulatory & Law Enforcement Authorities: Where boss188 is legally required to disclose Member data to a regulatory authority, gaming licensing body, financial intelligence unit, or law enforcement agency, it will do so to the extent required by applicable law.
• Professional Advisers: Legal, accounting, and compliance advisers engaged by boss188 in the ordinary course of its business operations, where bound by appropriate confidentiality obligations.

All third-party processors engaged by boss188 are required to implement appropriate technical and organisational security measures and to process personal data only in accordance with boss188's documented instructions.

As an online platform serving Members in Malaysia and operating under international gaming authority licensing, boss188 may process and store personal data in jurisdictions outside Malaysia. Where personal data is transferred internationally, boss188 ensures that appropriate safeguards are in place — including contractual data protection clauses with receiving entities — to maintain a standard of protection equivalent to that applied within Malaysia.

Malaysian Members whose data is transferred internationally retain the same rights described in Section 9 of this Policy, regardless of where their data is stored or processed.

boss188 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the satisfaction of legal, regulatory, tax, accounting, and licensing obligations. Specific retention periods include:

• Account and identity data for active Members is retained for the duration of the Member's account and for a minimum of five (5) years following account closure, in compliance with AML and gaming regulatory record-keeping obligations.
• Financial transaction records are retained for a minimum of seven (7) years to satisfy tax and financial audit requirements.
• Customer support communications are retained for a minimum of three (3) years following resolution of the relevant matter.
• Marketing consent records are retained until consent is withdrawn, and for a reasonable period thereafter as evidence of compliance.

Where personal data is no longer required for any lawful purpose, boss188 will securely delete or anonymise the data in a manner that prevents reconstruction or identification.

Subject to applicable data protection law, Members and website visitors hold the following rights in relation to their personal data processed by boss188:

• Right of Access: You may request a copy of the personal data boss188 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to boss188's legal retention obligations.
• Right to Restriction: You may request that boss188 restrict processing of your personal data in certain circumstances.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact boss188 customer support via the live chat accessible from your account dashboard. boss188 will respond to valid requests within a reasonable timeframe and in any event within the period required by applicable law. In some circumstances, boss188 may be unable to comply with a request — for example, where doing so would interfere with regulatory obligations — and will explain the reason in such cases.

The boss188 website uses cookies and similar tracking technologies to operate and improve the Service. Cookies are small text files placed on your device when you visit a website. boss188 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the basic operation of the boss188 website — including maintaining your login session, remembering account preferences, and enabling secure navigation. These cookies cannot be disabled.
• Performance & Analytics Cookies: Used to collect anonymised data about how visitors use the boss188 website, which pages are visited most frequently, and how users navigate between sections. This data helps boss188 improve the platform experience for Malaysian Members.
• Functional Cookies: Enable enhanced functionality and personalisation — such as remembering your preferred language settings and display preferences.
• Marketing Cookies: Used to deliver relevant promotional content to Members who have consented to marketing communications. These cookies may track your activity across sessions to measure the effectiveness of promotional campaigns.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair the functionality of the boss188 platform, including the login process and account access features.

boss188 implements appropriate technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption applied to all data transmitted between your device and the boss188 platform, including during the boss188 login process and all financial transactions;
• Access controls restricting internal access to personal data to authorised personnel on a need-to-know basis;
• Regular security assessments and penetration testing of platform infrastructure;
• Secure, encrypted storage of sensitive Member data including identity documents and financial records;
• Incident response procedures for the detection, reporting, and remediation of personal data breaches.

Notwithstanding these measures, no internet transmission or electronic storage system is completely secure. Members are reminded of their own responsibility to protect their boss188 login credentials and to use secure, private network connections when accessing their accounts. Do not access your boss188 account via unsecured public Wi-Fi networks, particularly in locations such as shopping malls in KL or public spaces in Penang where open networks are prevalent.

boss188 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or platform operations. Where material changes are made to this Policy, boss188 will notify registered Members via the platform or by email to their registered address. The "Last Updated" date at the top of this page will be revised to reflect the date of any amendments.

Continued use of the boss188 platform following notification of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the revised Policy, you should cease use of the Service and may request account closure by contacting customer support.

For all privacy-related queries, data subject rights requests, or complaints relating to the handling of your personal data by boss188, please contact: