Privacy Policy boss188 —
Personal Data & Information Protection

Welcome to the boss188 Privacy Policy page. We understand that your trust is the most valuable asset we hold, and we are committed to protecting your privacy in a transparent, responsible manner that complies with applicable laws in Malaysia — including the Personal Data Protection Act 2010 (PDPA).

This Privacy Policy details the types of information we collect, the purposes for collection, how we store and protect your data, and the rights you hold as a boss188 user. We encourage you to read this document carefully and to contact us should you have any questions or concerns.

Boss188 collects your personal information through several channels — including during account registration, the KYC (Know Your Customer) process, financial transactions, and through daily platform use. All information collected is intended to provide you with a safe, seamless and high-quality service experience.

We do not collect sensitive personal information such as your medical records, religious beliefs, or sexual orientation. Every category of data we collect has a clearly defined purpose, and we do not collect data beyond what is necessary.

Every piece of information you provide to boss188 is used responsibly and solely for the purposes stated below. We do not use your data for anything outside the scope of this service without your prior consent.

Your data security is the absolute priority of boss188. We continuously invest in the latest security infrastructure to ensure your personal information is always protected against unauthorized access, data breaches, or any cyber threats.

• 256-bit SSL encryption: All data transmitted between your device and boss188 servers is encrypted using TLS 1.3 with AES-256 encryption. This ensures no third party can intercept or read your data in transit.
• Secure storage: Your personal data is stored in databases protected by server-level encryption, role-based access control (RBAC), and intrusion detection systems (IDS) operating 24/7.
• Two-factor authentication (2FA): boss188 supports 2FA for all user accounts. We strongly encourage you to enable this feature for added protection against unauthorised access.
• Regular security audits: The boss188 platform undergoes regular penetration testing and security audits by independent third parties to identify and address any vulnerabilities before they can be exploited.
• Retention period: Your personal data is retained for as long as necessary to fulfil the purpose of collection or as required by law. Account data inactive for 5 years will be archived and deleted in accordance with established procedures.
• Secure data centers: All data is stored in data centres with ISO/IEC 27001 certification, equipped with physical access controls, uninterruptible power supply systems and a comprehensive disaster recovery plan.

Boss188 does not sell, rent or trade your personal information to any third party for their own marketing purposes. This is a commitment we will not compromise on. However, there are certain situations where we need to share your information with trusted parties, as outlined below:

• Payment service providers: To process your deposits and withdrawals, we share the necessary information with the payment gateway providers we use, including FPX, Maybank, CIMB, Touch 'n Go and GrabPay. This sharing is limited to the minimum data required to complete the transaction.
• Game service providers: Some games on the boss188 platform are provided by third-party game software providers. Wagering information and account IDs may be shared with them for necessary technical purposes.
• Legal authorities: boss188 will disclose the required information to regulatory authorities, law enforcement or courts when lawfully required to do so under Malaysian law.
• Audit partners: Audit firms and third parties conducting compliance reviews may access certain data within a limited scope during the audit process, subject to strict confidentiality agreements.
• Business transfers: If boss188 is involved in a merger, acquisition or asset sale, user information may be transferred as part of those assets. Users will be notified before their data becomes subject to a different privacy policy.

The boss188 platform uses cookies and similar tracking technologies to enhance user experience, analyze website traffic, and ensure the security of your login sessions. Cookies are small text files stored on your device that allow the platform to remember your preferences and settings.

• Mandatory cookies: These cookies are required for core platform functions, including login session authentication, account security, and language preferences. You cannot disable mandatory cookies without affecting platform functionality.
• Performance cookies: We use analytics cookies (in anonymised and aggregated form) to understand how users interact with the boss188 platform, which pages are most popular, and where technical issues occur.
• Functional cookies: These cookies store your preferences such as language settings, display themes, and game selections to make your next visit more convenient.
• Cookie controls: You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect specific functions within the boss188 platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and boss188's internal policies, you have clearly defined rights regarding your personal information. We fully respect and facilitate the exercise of these rights.

• Right of access: You have the right to request a copy of all personal information we hold about you. This request will be processed within 14 business days.
• Right to rectification: If the information we hold is inaccurate or outdated, you have the right to request an immediate correction. Basic profile information can be updated directly through your account settings.
• Right to erasure: Under certain circumstances, you have the right to request the deletion of your personal information. Please note that this right may be limited by legal requirements to retain financial transaction records.
• Right to restriction of processing: You have the right to request that we restrict how we use your data while a dispute or complaint is being resolved.
• Right to object to marketing: You may object to the use of your data for direct marketing purposes at any time without providing any reason. An unsubscribe option is available in every promotional email we send.
• Right to data portability: You have the right to receive your data in a structured, machine-readable format for transfer to another service provider.

If you decide to close your boss188 account, here is what will happen to your personal data. We want to make sure you fully understand what becomes of your information after account closure.

• Active data: Once account closure is confirmed, your profile information will be deleted from boss188's active systems within 30 days.
• Financial records: Transaction records and deposit/withdrawal history must be retained for a minimum of 7 years in compliance with Malaysia's financial and AML regulations. This data cannot be deleted before that period expires.
• Game records: Wagering records and game activity are retained for 2 years after account closure for audit and licensing compliance purposes.
• Self-exclusion list: If you choose permanent self-exclusion, your name and identifying information will be kept on the exclusion list indefinitely to prevent re-registration that could put you at risk.
• Backup data: System backups may retain your data until the designated backup period ends — typically within 90 days after active deletion.

Boss188 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, new legal requirements, or improvements in how we protect your data. We are committed to informing you of any material changes in a clear and timely manner.

• Material change notification: Any changes that materially affect your rights or how we use your data will be communicated via email to your registered address and through in-platform notifications at least 14 days before taking effect.
• Minor changes: Language corrections, contact information updates, or clarifications that do not affect your rights may be updated without separate advance notice.
• Effective date: The date of the latest version is always shown at the top of this page. Continued use of the boss188 platform after that date constitutes acceptance of the changes made.

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, do not hesitate to reach out. The boss188 privacy team is always ready to assist you.

• Email: [email protected] — for written enquiries, data access requests or official privacy complaints.
• Live Chat: Available directly within the boss188 platform, 24/7 year-round. Average response time under 2 minutes.
• Telegram: Contact the official boss188 Telegram account for further support and urgent enquiries.
• Response time: Privacy-related requests will be handled within 14 business days. Cases requiring in-depth investigation may take up to 30 days.