Privacy Policy boss188
— Member Personal Data Protection

This Privacy Policy describes boss188's practices regarding the collection, use, disclosure, and protection of your personal information when you use our platform. boss188 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards.

1. Personal Information We Collect

1.1 Information You Provide Directly

When you register a boss188 account or use our services, we collect the following information:

• Identity information: Full name, date of birth, MyKad or passport number
• Contact information: Email address, mobile phone number
• Financial information: Bank account number, digital wallet details, transaction history
• Security information: Username, password (stored in encrypted form), security questions
• KYC verification documents: MyKad copy, bank statement, proof of address when required

1.2 Information Collected Automatically

While you use the boss188 platform, our systems automatically record certain technical information for security and service improvement purposes:

• IP address and estimated location based on IP
• Web browser or mobile app type and version
• Your device's operating system
• Access times and dates, pages visited, session duration
• Cookie information and device identifiers
• Game activity and betting logs

1.3 Information From Third Parties

In certain circumstances, boss188 may receive information about you from trusted third parties, including identity verification providers, payment processors, and regulatory authorities. This information is used solely for verification and compliance purposes.

2. How We Use Your Information

Boss188 uses collected personal data only for legitimate, stated purposes. Below is a summary of our data usage:

3. Information Sharing & Disclosure

3.1 Third-Party Service Providers

Boss188 works with trusted third-party service providers to support platform operations. These third parties only receive data necessary for their specific tasks and are required to comply with strict data protection standards. Provider categories include:

• Payment processors and financial transaction gateways
• Identity verification (KYC) service providers
• Certified cloud infrastructure and hosting providers
• Analytics and fraud prevention software providers

3.2 Disclosure Under Legal Requirements

Boss188 may disclose your personal information when required by law, court order, or a competent regulatory authority in Malaysia. In such situations, we will notify you in advance where permitted to do so under applicable law.

4. Data Security & Protection Measures

Boss188 invests seriously in cybersecurity infrastructure to protect your personal data. The protection measures we implement include:

• 256-bit SSL Encryption: All communications between your browser and boss188's servers are fully encrypted
• Hashed Password Storage: Passwords are stored using the bcrypt hashing algorithm — even we cannot read your password
• Two-Factor Authentication (2FA): An additional security layer available for all member accounts
• 24/7 Monitoring: An automated intrusion detection system monitors suspicious activity around the clock
• Regular security audits: Penetration testing and security audits by independent third parties are conducted on a regular basis
• Data Isolation: Sensitive data is stored in isolated environments with strict access controls

While boss188 takes all reasonable steps to protect your data, no system can guarantee absolute security. You also play an important role by keeping your password confidential and ensuring your device remains secure.

5. Cookies & Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files stored on your device when you visit the boss188 website. They help the platform remember your preferences, maintain your login session, and enhance your overall user experience.

5.2 Types of Cookies Used

• Essential Cookies: Required for core platform functions such as login and session security. These cookies cannot be disabled.
• Performance Cookies: Collects anonymised information about how you use the platform to help us improve our services.
• Functional Cookies: Remembers your preferences such as language, display settings, and personal choices.
• Analytics Cookies: Helps us understand platform usage patterns for continuous improvement.

6. Your Rights as a Member

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by boss188:

7. Data Storage & Transfer

7.1 Retention Period

Boss188 retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by Malaysian law. Generally:

• Active account data: Retained for as long as your account remains active
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with financial legal requirements
• Security logs: Retained for 2 years for investigation purposes
• Support communication data: Retained for 3 years after issue resolution
• Terminated account data: Deleted within 90 days of account closure, subject to legal retention requirements

7.2 Cross-Border Data Transfer

In situations where data needs to be transferred to servers located outside Malaysia — for example, for international payment processing or cloud services — boss188 ensures all such transfers comply with applicable legal requirements and that data is protected to a standard equivalent to Malaysian regulations.

8. Third-Party Links

The boss188 platform may contain links to third-party websites or services for your convenience. Please note that this Privacy Policy applies solely to the boss188 platform. boss188 is not responsible for the privacy practices of any third-party websites you may access through those links. We encourage you to read the privacy policy of every website you visit.

9. Children's Privacy

The boss188 platform is restricted to individuals aged 18 and above entirely. We do not knowingly collect or process personal data from minors. If you believe we have inadvertently collected data from a minor, please contact our support team immediately and we will take action to delete the relevant information as soon as possible.

10. Amendments to the Privacy Policy

Boss188 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. When significant changes are made, we will notify you via:

• In-app or boss188 website notifications
• Email to your registered address
• A clear notice displayed at the top of the Privacy Policy page

The "Last Updated" date at the top of this page indicates when the most recent amendment was made. Continued use of the boss188 platform after any amendments are published will be considered your acceptance of the updated policy.

For any enquiries, concerns, or requests regarding your personal data privacy, please contact the boss188 Data Protection Officer (DPO) team via Live Chat, available 24 hours a day, 7 days a week.