Privacy Policy

1. Introduction

This Privacy Policy ("Policy") sets out how Boss188 ("the Platform", "Boss188", "we", "us", "our") collects, processes, stores, shares, and protects the personal data of individuals ("you", "your", "the User") who access or use the Boss188 website, mobile applications, and associated services (collectively, the "Services").

Boss188 is an online gaming and sports betting platform operated for and marketed to players in Malaysia. Our Services are delivered in English and designed around the needs of Malaysian players, including support for MYR (Malaysian Ringgit) accounts and local payment methods such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank.

Boss188 takes its data protection obligations seriously. We process personal data only where we have a valid legal basis to do so, and we handle all personal data in accordance with applicable data protection legislation, including the Personal Data Protection Act 2010 (PDPA) of Malaysia.

2. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, either directly or in combination with other information.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, use, disclosure, or deletion.
• "Data Controller" means Boss188 in its capacity as the entity that determines the purposes and means of processing personal data collected through the platform.
• "Data Processor" means a third party that processes personal data on behalf of Boss188 under a written data processing agreement.
• "Sensitive Personal Data" means personal data pertaining to financial information, identity documentation, and any other category afforded heightened protection under applicable law.
• "PDPA" means the Personal Data Protection Act 2010 of Malaysia (Act 709).
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "Cookies" means small text files placed on your device by the Boss188 platform to facilitate session management, analytics, and personalisation functions.

3. Data We Collect

Boss188 collects personal data through several channels, including directly from you at registration, through your use of the Services, and via automated technical means. The categories of personal data we collect are set out below.

3.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, email address, mobile number, and preferred username;
• Identity verification (KYC) data: Copies of government-issued identity documents (e.g., Malaysian Identity Card / MyKad, passport), proof of address (e.g., utility bill, bank statement), and proof of payment method ownership;
• Financial data: Payment method details submitted for deposits and withdrawals, including e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), bank account references (Maybank, CIMB, Public Bank, Hong Leong), and DuitNow QR or FPX account details;
• Communications data: The content of any messages you send to Boss188 via live chat, email, or any other support channel.

3.2 Data Collected Automatically

• Technical data: IP address, browser type and version, operating system, device identifiers, and screen resolution;
• Usage data: Pages visited, game titles accessed, betting history, session duration, and click-path data;
• Location data: Approximate geographic location derived from IP address (country and city level only — Boss188 does not collect GPS-level location data);
• Cookie and tracking data: Session cookies, analytics cookies, and preference cookies as described in Section 7 of this Policy.

3.3 Data from Third Parties

Boss188 may receive limited personal data from third-party payment processors, identity verification service providers, and fraud detection systems in connection with the processing of deposits, withdrawals, and KYC verification. Such third-party data sharing is governed by agreements that require the third party to protect the data in accordance with applicable law.

4. How We Process Your Data

Boss188 processes your personal data for the following specific purposes. Where the purpose has changed since data was originally collected, Boss188 will notify you of the new purpose before any further processing takes place.

5. Legal Basis for Processing

Boss188 processes your personal data only where a valid legal basis exists under the PDPA and applicable data protection law. The legal bases we rely upon are as follows:

5.1 Contractual Necessity

Processing is necessary for the performance of the contract between you and Boss188 — specifically, the Terms and Conditions you accepted at registration. This covers account management, payment processing, and the delivery of gaming and sports betting services.

5.2 Legal Obligation

Processing is necessary for Boss188 to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, identity verification mandates, and any reporting obligations under applicable Malaysian law.

5.3 Legitimate Interests

Processing is necessary for the purposes of Boss188's legitimate interests, including fraud prevention, platform security, responsible gambling monitoring, and the improvement of our Services — provided those interests are not overridden by your rights and freedoms.

5.4 Consent

Where Boss188 processes your personal data for purposes not covered by the above bases — in particular, for direct marketing communications — we will do so only with your explicit consent. You may withdraw consent at any time by contacting customer support or updating your communication preferences within your account settings.

6. Data Sharing & Disclosure

Boss188 does not sell or rent your personal data to third parties. We share personal data only in the specific circumstances described below, and only to the extent necessary for the stated purpose.

6.1 Payment Processing Partners

In order to process your deposits and withdrawals, Boss188 shares the minimum necessary financial and identity data with our payment processing partners. These include providers supporting Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and USDT TRC20 transactions. All payment partners are required to process your data in accordance with applicable law and to maintain appropriate security standards.

6.2 Identity Verification Providers

Boss188 uses third-party KYC and identity verification service providers to process identity documents and confirm the eligibility of players. These providers act as Data Processors under written agreements that prohibit them from using your data for any purpose other than the provision of verification services to Boss188.

6.3 Technology and Infrastructure Providers

Boss188 engages third-party providers for cloud hosting, data analytics, cybersecurity, and platform infrastructure. These providers may process certain technical and usage data as part of their service delivery, strictly under Boss188's instructions and subject to data processing agreements.

6.4 Legal and Regulatory Disclosure

Boss188 may disclose personal data to law enforcement authorities, regulatory bodies, or courts where required to do so by applicable law, court order, or regulatory directive. Boss188 will, where legally permitted, notify affected users of such disclosures.

6.5 Business Transfers

In the event that Boss188 undergoes a merger, acquisition, restructuring, or sale of assets, personal data held by Boss188 may be transferred to the acquiring entity as part of that transaction, subject to the acquiring entity assuming equivalent privacy obligations.

7. Cookies & Tracking Technologies

Boss188 uses cookies and similar tracking technologies to operate and improve the platform. The types of cookies we use are described below.

7.1 Strictly Necessary Cookies

These cookies are essential for the Boss188 platform to function. They manage your login session, maintain your account state across pages, and support security functions including CSRF protection. These cookies cannot be disabled without rendering the platform non-functional.

7.2 Analytics Cookies

Boss188 uses analytics cookies to collect aggregated, anonymised data about how users navigate the platform — including pages visited, game titles accessed, and session durations. This data is used exclusively to improve platform performance and user experience. No individually identifiable data is shared with analytics providers beyond what is necessary.

7.3 Preference Cookies

Preference cookies remember your settings and choices on the Boss188 platform, such as your preferred language, display settings, and notification preferences. These cookies improve your experience by eliminating the need to re-enter preferences on each visit.

7.4 Managing Cookies

You may configure your browser to decline non-essential cookies at any time. Please note that disabling certain cookies may affect the functionality of the Boss188 platform. Instructions for managing cookies are available in your browser's help documentation.

8. Data Retention

Boss188 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The general retention periods applied by Boss188 are as follows:

Upon expiry of the applicable retention period, personal data is either securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual.

9. Your User Rights

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia and other applicable data protection principles, you have the following rights with respect to your personal data held by Boss188. To exercise any of these rights, please contact our customer support team in English at [email protected].

Boss188 will respond to all verified data rights requests within a reasonable timeframe and in accordance with applicable law. We may require you to verify your identity before processing a data rights request to protect against unauthorised access.

10. Security Measures

Boss188 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and Boss188 servers is encrypted using TLS 1.2 or higher;
• Encryption at rest: Sensitive personal data stored in Boss188 systems is encrypted at rest using AES-256 encryption;
• Access controls: Access to personal data within Boss188 systems is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access control;
• Two-factor authentication: Boss188 offers optional two-factor authentication (2FA) for player accounts and enforces 2FA for all internal administrative access to personal data systems;
• Penetration testing and security audits: Boss188 engages independent security professionals to conduct periodic penetration testing and vulnerability assessments of the platform;
• Incident response: Boss188 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, Boss188 will notify affected users and relevant authorities in accordance with applicable law.

11. Minors & Age Policy

The Boss188 platform is strictly intended for individuals who are 21 years of age or older. Boss188 does not knowingly collect, process, or retain personal data from individuals under the age of 21.

As part of our registration and KYC procedures, Boss188 verifies the age of all players before granting access to real-money gaming Services. Where Boss188 discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, that data will be deleted and the associated account will be immediately closed.

If you are a parent or guardian and believe that a minor has registered an account on Boss188 using false age information, please contact our customer support team immediately at [email protected] so that we may investigate and take appropriate action without delay.

12. Amendments to This Policy

Boss188 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. Where changes are material — that is, where they significantly affect the way we process your personal data or reduce your rights — Boss188 will provide advance notice to registered players via email or a prominent in-platform notification prior to the changes taking effect.

The effective date displayed at the top of this Policy will be updated each time the Policy is revised. Your continued use of the Boss188 platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must cease using the Services and close your account prior to the effective date of the changes.

We recommend bookmarking this page and reviewing it periodically, particularly following any notification of update from Boss188.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or Boss188's handling of your personal data, please contact our customer support team using the details below. All privacy-related enquiries are handled in English.

• Email: [email protected]
• Live Chat: Available on the Boss188 platform, 9:00 AM – 11:00 PM MYT daily
• Subject line for data requests: "Data Privacy Request – [Your Registered Email]"

Boss188 serves players across Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam — and our English-language support team is equipped to handle all data rights and privacy enquiries professionally and promptly.

For matters relating to your account terms and platform rules, please refer to our Terms & Conditions. For information about responsible gambling tools and self-exclusion, please visit our Responsible Gambling page.