Official Documents

Privacy Policy Boss88 – Personal Data Protection for Malaysian Members

Boss88 takes the protection of every member's personal data seriously. This document details how we collect, use, store, and safeguard your information in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010.

Updated: 1 January 2026 Jurisdiction: Malaysia Language: Malay (ms-MY) PDPA 2010
🔐
Your Data Is Protected
Boss88 is in full compliance with Malaysia's Personal Data Protection Act (PDPA) 2010
256-bit SSL Encryption
No Data Selling
Full Right of Access
Regular Audits
Our Commitment

How Boss88 Protects Your Privacy

Six core principles forming the foundation of personal data protection on the Boss88 platform.

Bank-Grade Encryption

All data transmitted between your browser and Boss88's servers is encrypted using TLS 1.3 with AES 256-bit encryption — the same standard used by leading Malaysian banking institutions such as Maybank and CIMB.

No Sale of Data to Third Parties

Boss88 does not sell, rent, or disclose members' personal data to any third party for marketing purposes. Your data belongs to you — it is not a business asset to be traded.

Data Minimisation Principle

We only collect data that is strictly necessary to provide our services. There is no excessive data collection. Every piece of information we request has a clear and lawful purpose.

Right of Access & Correction

You have the right to view, amend, and request deletion of your personal data at any time. Data access requests will be processed within 21 working days in accordance with the provisions of PDPA 2010.

PDPA 2010 Compliance

Boss88 operates in full compliance with Malaysia's Personal Data Protection Act 2010. Our privacy policy is reviewed periodically to ensure ongoing adherence to current legislation.

Regular Security Audits

Boss88's security systems undergo regular independent audits by third-party cybersecurity experts. Any vulnerabilities identified are promptly remediated to protect your data.

🔐
PRIVACY NOTICE – PLEASE READ CAREFULLY

This Privacy Policy describes how Boss88 manages personal data. By using the Boss88 platform, you acknowledge that you have read and understood this policy. If you disagree with any part of it, please discontinue use of the platform and contact us to discuss your options.

Section 1

Introduction & Scope of Privacy Policy

This Privacy Policy is issued by Boss88 ("we", "platform") and applies to all registered members, website visitors, and users of the Boss88 mobile application in Malaysia. This document explains how we handle your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Boss88 recognises that privacy is a fundamental right of every individual. We are committed to handling your personal data with respect, transparency, and accountability. Every data management decision we make is guided by the best interests and security of our members.

This Privacy Policy applies to all your interactions with Boss88, including account registration, deposits via Touch 'n Go eWallet, GrabPay, DuitNow or FPX, betting activity, and communications with our support team.

Section 2

Personal Data We Collect

Boss88 collects personal data through various methods guided by the data minimisation principle — we only collect what is strictly necessary.

2.1 Data You Provide Directly
Data TypeExamplePurpose
Identity InformationFull name, MyKad numberKYC Verification
Contact InformationMalaysian phone number, email addressAccount communications
Financial InformationE-wallet account number, bank account numberPayment Processing
PasswordStored in hashed form (non-readable)Login security
Location InformationState in MalaysiaJurisdictional compliance
2.2 Automatically Collected Data
  • IP address and network information;
  • Device type, operating system, and web browser used;
  • Activity log data: login times, pages visited, games played;
  • Transaction data: date, amount, payment method (TNG, GrabPay, Boost, ShopeePay, DuitNow, FPX);
  • Approximate location data (state level) derived from IP address.

Boss88 does not collect sensitive information such as biometric data, health information, or political affiliations. Your password is never stored in plain text.

Section 3

How & Why We Use Your Data

Boss88 uses your personal data solely for legitimate and transparent purposes. The primary purposes are as follows:

3.1 Service Provision
  • Creating and managing your member account on the Boss88 platform;
  • Processing deposits and withdrawals via your chosen Malaysian payment method;
  • Providing access to all games including Live Casino, football, slots, poker, badminton, and lottery;
  • Managing bonus programmes and promotions that you claim.
3.2 Security & Fraud Prevention
  • Detecting and preventing unauthorised access to your account;
  • Monitoring suspicious activity such as multiple failed login attempts or unusual transactions;
  • Compliance with Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements;
  • Verifying that you meet the minimum age requirement of 18 years.
3.3 Service Improvements
  • Analysing usage patterns to improve the user experience;
  • Improving platform performance and resolving technical issues;
  • Developing new features based on the needs of Malaysian members.

Boss88 will not use your data to make automated decisions that significantly affect you without human involvement, except for real-time fraud detection required to keep your account secure.

Section 4

Data Sharing with Third Parties

Boss88 does not sell or rent your personal data. Data sharing only occurs in the following limited circumstances:

4.1 Service Providers (Vendors)

We share only the minimum necessary data with the following parties to deliver our services:

  • Payment Processors: E-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay) and banks (for FPX – Maybank2u, CIMB Clicks) to process financial transactions;
  • Game Providers: Licensed providers such as Evolution Gaming and Pragmatic Play receive only the minimum session data required to deliver their games;
  • Identity Verification Services: Licensed third-party KYC providers for the purpose of document verification;
  • Hosting & Infrastructure Services: Server providers that process data under strict confidentiality agreements.
4.2 Legal Requirements

Boss88 may disclose personal data where required by Malaysian law, court order, or direction from a competent authority. In such circumstances, we will disclose only the minimum information necessary.

All third parties we work with are subject to data protection agreements requiring them to handle your data to the same or higher standard as Boss88.

Section 5

Data Security Measures

The security of your personal data is Boss88's top priority. We have implemented multiple layers of technical and organisational protection:

5.1 Technical Safeguards
  • Encryption in Transit: TLS 1.3 with AES-256 for all data in transit;
  • Encryption at Rest: Sensitive data is encrypted at rest within the database;
  • Password Hashing: Passwords are stored using the bcrypt algorithm with a unique salt;
  • Two-Factor Authentication (2FA): Available and recommended for all member accounts;
  • Firewall & IDS: Intrusion detection systems operating 24/7;
  • Penetration Testing: Conducted quarterly by independent security experts.
5.2 Access Control
  • Access to member data is granted only to staff who require it for their responsibilities;
  • All internal access is logged and monitored;
  • Boss88 staff will never ask for your password through any communication channel.

While Boss88 takes all reasonable precautions, no security system is entirely immune to attack. You are also responsible for keeping your password and account login credentials secure.

Section 6

Data Retention Period

Boss88 retains your personal data only for as long as necessary for the stated purposes or as required by law:

Data CategoryRetention PeriodReason
Active Account InformationFor as long as the account is activeService Provision
Transaction Records7 yearsLegal & tax requirements
Security Logs2 yearsSecurity Audits
KYC Records5 years after account closureAML Compliance
Communications Data2 yearsCustomer Support
Marketing DataUntil you withdraw your consentPromotional communications

Once the retention period expires, data will be securely deleted or anonymised so it can no longer be linked to your identity.

Section 7

Cookies, Analytics & Tracking Technologies

Boss88 uses cookies and similar tracking technologies to enhance your experience on the platform.

7.1 Types of Cookies Used
  • Essential Cookies: Required for core platform functions such as login and session security. Cannot be disabled;
  • Performance Cookies: Collecting anonymised usage data to help us understand how the platform is used and improve it;
  • Functional Cookies: Saving your preferences such as language and display settings;
  • Analytics Cookies: Using first-party analytics tools to monitor platform performance.
7.2 Cookie Management

You can manage or disable cookies through your web browser settings. Please note that disabling essential cookies may affect the functionality of the Boss88 platform. For more information on managing cookies in your browser, refer to your browser's help documentation.

Boss88 does not use cross-site tracking technologies from third parties. We only track activity within the Boss88 platform itself.

Section 8

Your Rights Under PDPA 2010

As a data subject, you have the following rights under Malaysia's Personal Data Protection Act 2010:

👁️
Right of Access

Request a copy of all personal data we hold about you. Processed within 21 working days.

✏️
Right to Rectification

Request correction of any inaccurate or incomplete data in your account.

🗑️
Right to Erasure

Request deletion of your data when it is no longer required, subject to legal obligations.

🚫
Right to Object

Object to the processing of your data for direct marketing purposes at any time.

📦
Right to Portability

Receive a copy of your data in a machine-readable format for transfer to another platform.

⏸️
Right to Restriction

Request a restriction on the processing of your data during a dispute or while its accuracy is under review.

Section 9

Child Protection

Boss88 is an online betting platform intended solely for individuals aged 18 and above. We take the protection of minors seriously within the context of digital privacy.

  • Boss88 does not knowingly collect personal data from individuals under the age of 18;
  • Should we discover that a child's data has been collected inadvertently, it will be deleted immediately;
  • Parents or guardians who discover that their child has registered a Boss88 account should contact us immediately at support@boss88.cash;
  • Any account confirmed to belong to a minor will be terminated immediately and all associated data will be deleted.

If you become aware that a minor is using the Boss88 platform, please contact us immediately. We are committed to acting swiftly in such cases.

Section 10

Amendments to the Privacy Policy

Boss88 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, legislative developments, or service improvements.

10.1 Amendment Notice
  • Material amendments will be announced via an in-platform notice at login;
  • The "Last Updated" date at the top of this document will be revised;
  • For amendments that significantly impact your privacy rights, we will endeavour to provide notice via email or an in-account message;
  • Your continued use of the Boss88 platform following any amendments constitutes your acceptance of the revised policy.

We encourage you to review this page periodically to stay informed about how Boss88 protects your information.

Section 11

How to Contact Us

For any enquiries, privacy rights requests, or complaints regarding how Boss88 handles your personal data, please contact us through the following channels:

💬
Live Chat
Available 24/7 within the Boss88 platform. The fastest way to get a response.
📧
Privacy Email
support@boss88.cash — for privacy rights requests, please include "PDPA Request" in the email subject line.

We are committed to responding to all privacy enquiries within 3 working days and resolve rights requests within 21 working days in accordance with the provisions of PDPA 2010.

Thank you for trusting Boss88 with your personal data. Your trust is a responsibility we take seriously. Your privacy is our priority — not merely a legal obligation.

🔐
Your Data Is Safe With Us

Play with Confidence – Boss88 Protects Your Privacy

With a transparent privacy policy, bank-grade encryption, and full PDPA 2010 compliance, you can enjoy live casino, football, slots, poker, and all Boss88 games with complete peace of mind.

Terms & Conditions  ·  Responsible Gaming  ·  Frequently Asked Questions

Bahasa Melayu