Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how bossbb ("we", "us", "our"), the operator of the website accessible athttps://bossbb.cam ("the Platform"), collects, uses, discloses, stores and protects personal data relating to individuals ("users", "you") who access or use the Platform.

bossbb is an English-language online information and entertainment platform serving Malaysian adults with an interest in casino games, sports betting, local payment methods and responsible gambling practices. Our primary audience is located in Malaysia, including users in Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru and Shah Alam, and this Policy reflects the data handling standards appropriate to that context.

We are committed to protecting the privacy of all users. This Policy is written in plain, accessible English to ensure that every bossbb user can understand their rights and our obligations clearly.

Definitions

For the purposes of this Privacy Policy, the following terms are defined as follows:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, contact number, financial data and device identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" — bossbb, as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — a third party that processes personal data on behalf of bossbb, such as a payment provider or hosting service.
• "Consent" — a freely given, specific, informed and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "Cookies" — small text files placed on your device by the Platform to enable certain functionality, analytics and user experience features.
• "KYC" — Know Your Customer; the identity verification process used to confirm account holder details, age and authenticity of submitted documents.
• "MYR" / "RM" — Malaysian Ringgit; the currency in which all financial transactions on the Platform are denominated.

Data We Collect

bossbb may collect the following categories of personal data depending on how you interact with the Platform:

We do not collect special category data (such as health data, biometrics or racial information) unless specifically required by applicable law and with your explicit consent.

How We Collect Data

bossbb collects personal data through the following methods:

• Direct collection: Information you provide voluntarily when registering an account, completing KYC verification, submitting a support request or updating your account profile.
• Automated collection: Technical and usage data collected automatically when you access the Platform through cookies, server logs and similar tracking technologies.
• Third-party sources: Data received from payment processors when you initiate a deposit or withdrawal using Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Hong Leong Bank, DuitNow, FPX or supported cryptocurrency networks including USDT, Bitcoin (BTC) and Ethereum (ETH).
• Identity verification services: Confirmation data received from third-party KYC providers where identity documents are verified externally on our behalf.

Data Processing Purposes

bossbb processes personal data for the following specific purposes. We do not process your data for any purpose beyond those listed below without first providing separate notice and, where required, obtaining your consent:

1. Account creation and management: To register and maintain your bossbb account, including authentication, password recovery and profile management.
2. Identity and age verification (KYC): To confirm that account holders are at least 21 years of age and that the identity information provided is accurate, in compliance with our Terms and Conditions.
3. Payment processing: To facilitate MYR deposits and withdrawals through supported Malaysian payment channels and to maintain an accurate transaction history.
4. Fraud prevention and security: To detect and investigate suspicious activity, unauthorised access and potential breaches of our Terms.
5. Legal and regulatory compliance: To fulfil obligations imposed by applicable law, including anti-money laundering (AML) requirements and responses to lawful requests from regulatory or law enforcement authorities.
6. Customer support: To respond to your enquiries and resolve account issues effectively.
7. Responsible gambling tools: To administer deposit limits, cooling-off periods, self-exclusion requests and other player protection measures.
8. Platform improvement: To analyse aggregated usage patterns and improve the performance, design and content of the bossbb Platform.
9. Communications: To send you account-related notifications, security alerts and, where you have given permission, promotional communications about bossbb services.

Legal Basis for Processing

bossbb processes personal data one or more of the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to perform our agreement with you, including account registration, payment processing and KYC verification under our Terms and Conditions.
• Legal obligation: Processing required to comply with applicable law, including AML obligations, identity verification requirements and responses to lawful authority requests.
• Legitimate interests: Processing carried out in pursuit of bossbb's legitimate business interests, including fraud prevention, platform security and analytics, where those interests are not overridden by your fundamental rights.
• Consent: Processing for purposes such as optional marketing communications, where we have obtained your specific, informed and freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

Data Sharing

bossbb does not sell, rent or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients, strictly as required to operate the Platform:

• Payment service providers: Entities that process financial transactions on our behalf, including operators of Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Hong Leong Bank, Public Bank, DuitNow, FPX and cryptocurrency payment networks. These providers receive only the data necessary to complete a specific transaction.
• Identity verification services: Third-party KYC providers that assist with document verification and age confirmation. Such providers operate under data processing agreements with bossbb.
• Platform infrastructure providers: Cloud hosting, data storage and content delivery services. These providers are contractually bound to process data only bossbb's instructions.
• Regulatory and law enforcement authorities: Where required by applicable law, court order or regulatory instruction, bossbb will disclose personal data to the relevant authority. We will inform you of such disclosure where legally permitted to do so.
• Fraud prevention agencies: Where necessary to investigate or prevent fraudulent activity, we may share relevant account or transaction data with specialist fraud prevention services.

All third parties with whom bossbb shares personal data are required to maintain appropriate security standards and to use the data only for the specified purpose.

Data Retention

bossbb retains personal data only for as long as is necessary to fulfil the purpose for which it was collected and to satisfy any applicable legal or regulatory retention obligations. The following indicative retention periods apply:

Following expiry of the applicable retention period, personal data will be securely deleted or anonymised in manner that prevents reconstruction of identifiable information.

User Rights

As a bossbb user, you hold a number of rights in relation to your personal data. These rights are described below. To exercise any of these rights, please contact us at the email address set out in Section 15 of this Policy.

Cookies and Tracking Technologies

bossbb uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the site. We use the following categories of cookies:

• Essential cookies: Necessary for the Platform to function, including session management and security tokens. These cannot be disabled without affecting Platform functionality.
• Analytics cookies: Used to understand aggregate usage patterns — such as pages visited and session duration — to improve the Platform's design and content. Data collected through analytics cookies is aggregated and anonymised where possible.
• Preference cookies: Store your settings and preferences, such as language or display options, to provide a more consistent experience on subsequent visits.

You may manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the availability or functionality of some features on the bossbb Platform. For detailed cookie controls, consult the Help or Privacy section of your browser.

Data Security

bossbb implements reasonable and appropriate technical and organisational measures to protect personal data from unauthorised access, accidental loss, disclosure, alteration or destruction. These measures include:

• Encryption of data in transit using industry-standard protocols;
• Restricted access to personal data on need-to-know basis within the bossbb organisation;
• Regular review of access permissions and security configurations;
• Security monitoring to detect and respond to potential threats;
• Contractual security obligations imposed on all third-party data processors.

While we apply robust security practices, no method of electronic transmission or storage is completely secure. Users are encouraged to protect their own accounts by using strong passwords, enabling available two-factor authentication and avoiding account access from shared or public devices.

Minors and Age Verification

The bossbb Platform is strictly intended for adults aged21 years and above. We do not knowingly collect or process personal data from individuals below this age. Age confirmation is a mandatory step in the account registration process, and bossbb reserves the right to request documentary proof of age at any time through the KYC verification process.

If bossbb becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you have reason to believe that a minor has registered on the Platform, please contact us at the address in Section 15.

International Data Transfers

In the course of operating the Platform and processing payments — including through Malaysian services such as DuitNow, FPX and major banks including Public Bank — some personal data may be transferred to or processed in countries outside Malaysia. Where such transfers occur, bossbb takes steps to ensure that appropriate safeguards are in place, including:

• Data processing agreements with contractual clauses that require recipient parties to maintain comparable levels of data protection;
• Transfers only to jurisdictions or service providers that meet an adequate standard of data protection assessed by bossbb;
• Minimisation of the personal data included in any cross-border transfer to only what is necessary for the stated purpose.

By using the Platform and providing personal data, you acknowledge that your information may be transferred, stored and processed in the manner described in this section.

Policy Amendments

bossbb reserves the right to update this Privacy Policy at any time. Where changes are material, we will provide reasonable advance notice through the Platform or by email to your registered address. The "Last updated" date at the top of this page will be revised accordingly.

Your continued use of the bossbb Platform following the publication of any amended Policy constitutes your acceptance of the revised terms. We recommend reviewing this page periodically to remain informed about how we handle your personal data.

Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy, your personal data, or the exercise of your rights described in Section 9, please contact the bossbb data team using the following channel:

Website email: [email protected]

Please include your registered account username, a clear description of your request and any relevant supporting information. We will endeavour to acknowledge all privacy requests promptly and respond substantively within a reasonable timeframe. Please note that certain requests — such as erasure of data subject to legal retention obligations — may require additional review before they can be actioned.