boss96 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") sets out the practices of boss96 ("the Platform", "we", "us", "our") with respect to the collection, use, storage, transfer, and protection of personal data relating to individuals ("Members", "visitors", "you") who register for, access, or interact with boss96.one and its associated services.

boss96 is committed to handling personal data responsibly and in accordance with applicable data protection principles, including those set out under our international gaming authority licensing obligations. By registering for a boss96 account or continuing to use boss96.one after the effective date of this Policy, you acknowledge that you have read and understood the practices described herein.

If you have any questions about how boss96 handles your personal data, please contact our support team at [email protected] before using the Platform.

2. Data Controller

For the purposes of this Policy, boss96 acts as the data controller in respect of the personal data collected from Members and visitors of boss96.one. As data controller, boss96 determines the purposes and means by which personal data is processed in connection with the provision of online casino, sports betting, and related services.

boss96 operates under an international gaming authority licence. The Platform's registered contact for data-related enquiries is [email protected]. All data-related requests will be acknowledged within 5 business days and resolved within 30 calendar days, consistent with applicable regulatory requirements.

3. Personal Data We Collect

3.1 Registration Data

When you create a boss96 account, we collect the following information that you provide directly:

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Residential address, including postcode and country
• Email address
• Mobile phone number
• Preferred currency (MYR by default for Malaysian Members)
• Username selected at registration

3.2 Identity Verification Data

In compliance with our gaming authority licensing obligations and anti-money laundering (AML) requirements, boss96 may request the following at account verification or prior to processing withdrawals above specified thresholds:

• Government-issued photographic identification (Malaysian IC, passport, or equivalent)
• Proof of residential address (utility bill, bank statement dated within 3 months)
• Proof of payment method ownership (screenshot of e-wallet, bank statement header)
• Source of funds documentation where required by regulatory obligations

3.3 Financial Transaction Data

We collect records of all financial transactions conducted through your boss96 account, including deposit amounts, payment methods used, withdrawal requests, bonus credits and debits, and transaction timestamps. This data is retained for regulatory compliance and dispute resolution purposes.

3.4 Gaming Activity Data

boss96 records all wagering activity on the Platform, including game type, bet amounts, session duration, win and loss outcomes, and bonus usage. This data is used for account statement generation, responsible gaming monitoring, and regulatory reporting where applicable.

3.5 Technical & Device Data

When you access boss96.one, our servers automatically collect certain technical information, including your IP address, device type and operating system, browser type and version, session timestamps, and referring URL. This data is used for security monitoring, fraud prevention, and platform performance optimisation.

4. How We Collect Your Data

boss96 collects personal data through the following means:

• Direct submission: Information you provide when completing the boss96 registration form, updating your account profile, or contacting support
• Automated collection: Technical data collected automatically when you visit boss96.one via server logs, session cookies, and similar technologies
• Payment processors: Transaction confirmation data received from payment service providers (Touch n Go, Boost, GrabPay, Malaysian banks) upon completion of deposits or withdrawals
• Third-party verification services: Identity verification data returned by KYC/AML service providers engaged by boss96 for regulatory compliance purposes

5. Legal Basis for Processing

boss96 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the Member agreement — account creation, transaction processing, game access, withdrawal handling, and customer support
• Legal obligation: Processing required to comply with applicable gaming licensing conditions, AML obligations, age verification requirements, and tax reporting duties
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement where such interests are not overridden by your privacy rights
• Consent: Processing for optional marketing communications, where you have provided explicit opt-in consent that may be withdrawn at any time

6. How We Use Your Personal Data

boss96 uses the personal data collected for the following purposes:

• Creating, maintaining, and managing your boss96 account
• Processing deposits and withdrawals in MYR via your selected payment methods
• Verifying your age (21+) and identity in compliance with gaming licensing requirements
• Providing customer support via live chat and email
• Detecting and preventing fraud, money laundering, and prohibited conduct as defined in our Terms & Conditions
• Monitoring gaming activity for responsible gaming purposes and applying limits or interventions where necessary
• Sending transactional notifications (deposit confirmations, withdrawal updates, security alerts) to your registered email or phone number
• Sending promotional communications where you have provided consent to receive them
• Maintaining records required by our gaming authority licensing obligations
• Improving platform performance, identifying technical issues, and conducting internal analytics

7. Data Sharing & Disclosure

7.1 Service Providers

boss96 shares personal data with third-party service providers engaged to support Platform operations, including payment processors (Touch n Go eWallet, Boost, GrabPay, Malaysian banks), identity verification providers, game software providers, cloud hosting providers, and customer support platform vendors. All service providers are contractually bound to process data only as instructed by boss96 and to maintain appropriate security standards.

7.2 Regulatory Disclosure

boss96 may disclose personal data to gaming regulatory authorities, financial intelligence units, law enforcement agencies, or other government bodies where required by law, court order, or our gaming authority licensing obligations. boss96 will notify affected Members of such disclosure to the extent permitted by law.

7.3 No Commercial Sale

boss96 does not sell, rent, lease, or otherwise transfer your personal data to third parties for their own commercial or marketing purposes. This restriction applies without exception.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of boss96's assets, personal data held by boss96 may form part of the transferred assets. Affected Members will be notified prior to data transfer and given the opportunity to request account closure if they do not consent to the transfer.

8. International Data Transfers

boss96 may process or store personal data on servers located outside of Malaysia in connection with its cloud infrastructure and gaming platform operations. Where personal data is transferred internationally, boss96 ensures that appropriate safeguards are in place — including data processing agreements incorporating standard contractual clauses — to provide a level of protection equivalent to that applicable under our gaming authority licensing jurisdiction.

9. Data Retention

boss96 retains personal data for as long as is necessary to fulfil the purposes set out in this Policy and to comply with applicable legal and regulatory obligations. The following indicative retention periods apply:

• Active account data: Retained for the duration of your account's active status
• Closed account data: Retained for a minimum of 5 years following account closure, in compliance with gaming authority AML and record-keeping requirements
• Transaction records: Retained for a minimum of 7 years for financial regulatory compliance
• Technical logs: Retained for up to 12 months for security and fraud investigation purposes, then deleted or anonymised
• Marketing consent records: Retained for 3 years from the date of last interaction or consent withdrawal

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual.

10. Cookies & Tracking Technologies

10.1 What We Use

boss96.one uses cookies — small text files stored on your device — and similar session-based technologies. The cookies used by boss96 fall into the following categories:

• Strictly necessary cookies: Required for the Platform to function — including session authentication, security tokens, and boss96 login state persistence. These cannot be disabled without preventing Platform access.
• Performance cookies: Collect anonymous data about how visitors navigate boss96.one (e.g., page load times, error rates) to help us improve Platform performance. No personal identifiers are included in this data.
• Preference cookies: Remember settings you have configured, such as language preference or responsible gaming tool selections.

10.2 What We Do Not Use

boss96 does not deploy third-party advertising cookies, cross-site tracking pixels, or device fingerprinting technologies for behavioural advertising purposes. Your browsing on boss96.one is not shared with ad networks or social media platforms for targeting purposes.

10.3 Cookie Control

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from accessing your boss96 account. All other cookie categories can be disabled without affecting account functionality, though some Platform features may operate with reduced personalisation.

11. Security Measures

boss96 implements technical and organisational security measures proportionate to the risks associated with processing personal data in the online gaming context. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and boss96 servers
• AES-256 encryption for sensitive personal data at rest in our databases
• Two-factor authentication (2FA) available and encouraged for all Member accounts
• Role-based access controls limiting staff access to personal data to that required for their specific function
• Continuous server-side monitoring for anomalous access patterns and suspected account compromise
• Regular security assessments and penetration testing of Platform infrastructure

Notwithstanding these measures, no internet-based service can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, boss96 will notify affected Members and relevant regulatory authorities in accordance with applicable breach notification obligations.

12. Your Privacy Rights

Subject to applicable law and regulatory limitations, you have the following rights in respect of your personal data held by boss96:

• Right of access: Request a copy of the personal data boss96 holds about you, including the categories of data, purposes of processing, and retention period
• Right to rectification: Request correction of inaccurate or incomplete personal data on your boss96 account
• Right to erasure: Request deletion of your personal data where processing is no longer necessary, subject to regulatory retention obligations that may override this right
• Right to restrict processing: Request that boss96 limits the processing of your data in specified circumstances, such as while the accuracy of data is under dispute
• Right to data portability: Request a copy of personal data you have provided to boss96 in a structured, machine-readable format
• Right to withdraw consent: Withdraw marketing consent at any time by contacting support or adjusting notification preferences in your account settings
• Right to object: Object to processing of your personal data based on legitimate interests where you believe your rights and interests override those of boss96

To exercise any of the above rights, contact boss96 via live chat or email at [email protected]. We may require identity verification before fulfilling your request. boss96 will respond within 30 calendar days and will not charge a fee for reasonable, good-faith requests.

13. Children and Minors

boss96 is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under 21 years of age. If boss96 becomes aware that personal data has been collected from a person under 21, the relevant account will be immediately closed, all funds held will be handled in accordance with our Terms & Conditions, and the personal data will be deleted as expeditiously as possible. If you believe a minor has registered on boss96, please contact us immediately at [email protected].

14. Policy Updates

boss96 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform services. Material updates will be communicated to Members via email to their registered address and/or by a notice displayed on boss96.one, at least 14 days before the updated Policy takes effect. The "last updated" date at the top of this document indicates when the Policy was most recently revised. Continued use of boss96 following the effective date of an updated Policy constitutes acceptance of the revised terms. If you do not accept the updated Policy, you should cease using boss96 and may request account closure.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or boss96's handling of your personal data, please contact our team using the following channels:

• Live Chat: Available 24/7 via boss96.one — our preferred channel for quick privacy queries
• Email: [email protected] — for formal data subject requests, please include "Privacy Request" in your subject line

We aim to acknowledge all privacy enquiries within 2 business days and to resolve them within 30 calendar days. Where a request involves a complex regulatory question, we will notify you if additional time is required and the reason for the delay.