Personal Data Protection

Privacy Policy Bossku – Your Personal Data Protection

Your privacy is our priority. This document clearly explains how bossku collects, uses, stores, and protects the personal information of every member on our platform.

Updated: 1 January 2026  |  Version 2.5
Important Note: This Privacy Policy applies to all users of the Bossku platform, including the bossku.fun website and the Bossku mobile app. By using our platform, you fully agree to this policy.

1 Introduction and Our Commitment

Bossku takes seriously its responsibility to protect the privacy of every member who trusts our platform. As an online gaming platform operating in Malaysia, we understand that user trust is our most valuable and irreplaceable asset.

This Privacy Policy was drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices for data protection. This document transparently and comprehensively explains how we handle your personal information — from initial collection at registration through to long-term storage and eventual deletion.

We believe transparency is the foundation of a healthy relationship between a platform and its users. That's why we've written this policy in plain language that everyone can understand, not confusing legal jargon. If you have any questions after reading this document, our support team is ready to help.

Scope of This Policy: This Privacy Policy covers all your interactions with Bossku — account registration, gaming activity, financial transactions, mobile app usage, and any communications with our team.

2 Types of Personal Data We Collect

Bossku only collects personal data that is strictly necessary to provide you with a safe, seamless, and quality service. We do not collect excessive or irrelevant information beyond what is needed to operate the platform.

Data Categories Example Information Requirements
Identity Information Full name, ID card number, date of birth Required (KYC)
Contact Information Phone number, email address Required
Financial Information Bank name, account number (partial), e-wallet Required (transaction)
Usage Data Game logs, betting history, active session time Automatic
Device Data Device type, operating system, IP address Automatic
Verification Documents Identity card image, verification selfie Required (advanced KYC)

For identity verification (KYC), we may request a copy of your official identification document. These documents are stored securely and accessed only by authorised staff solely for identity verification purposes.

3 How We Collect Your Information

Bossku collects personal information through several different channels. Each collection method is designed to ensure we obtain accurate information while fully respecting your privacy.

  • Directly during the new account registration process on the bossku platform
  • Via the KYC identity verification form you complete before your first withdrawal
  • Automatically as you use the platform — including activity logs, session data, and device information
  • Via your communications with our customer support team through live chat or email
  • From authorised third-party payment providers when you make a deposit or withdrawal
  • Via cookie and tracking technologies operating within the bossku website and mobile app
  • From legitimate public sources for identity verification and fraud prevention purposes
Data Minimisation Principle: Bossku only collects data that is strictly necessary for the stated purposes. We do not collect sensitive data such as health information, religious beliefs, or political views.

4 Purpose of Using Your Personal Data

Every piece of information we collect is used for a clear and legitimate purpose. bossku does not use your personal data for any purpose unrelated to the provision of our services without your prior consent.

  • Creating and managing your member account on the bossku platform
  • Securely processing deposit, withdrawal, and bonus payment transactions
  • Carrying out the identity verification (KYC) process required under compliance regulations
  • Detecting and preventing fraud, money laundering, and platform abuse
  • Providing effective and timely customer support
  • Sending important notifications relating to your account, promotions, and platform updates
  • Improving the user experience based on usage patterns analysed in aggregate
  • Complying with legal obligations and applicable regulatory requirements
  • Ensuring platform security and protecting the interests of all members
Marketing: If you receive marketing communications from us, you may unsubscribe at any time by contacting our support team. Unsubscribing from marketing will not affect important communications related to your account.

5 Data Sharing with Third Parties

Bossku does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We only share necessary information with specific parties under strictly limited and controlled circumstances.

  • Payment Providers: Minimum transaction information required to process your deposits and withdrawals via channels such as DuitNow, FPX, and approved e-wallets
  • Identity Verification Providers: KYC data required to fulfil anti-money laundering legal compliance requirements
  • Technical Service Providers: Cloud and security infrastructure providers that help us operate the platform securely — subject to strict confidentiality agreements
  • Authorities: We will disclose information where required by law, court order, or lawful direction from Malaysian authorities
  • Auditors & Compliance: Independent auditors and compliance bodies requiring limited access for audit and licence verification purposes
Our Guarantee: All third parties with whom we share data are bound by strict data protection agreements. They are only permitted to use your data for the specific purposes defined in those agreements and nothing beyond that.

6 Data Storage and Security Measures

The security of your personal data is a core technical and operational priority at bossku. We continuously invest in the latest security infrastructure to ensure your information is always protected against cyber threats and unauthorized access.

  • All personal data is stored on servers protected with military-grade AES-256 encryption
  • All communication between your device and bossku's servers is protected with the latest TLS 1.3 protocol
  • Access to personal data is restricted solely to staff who genuinely require it to perform their duties.
  • Active intrusion detection systems monitor for suspicious activity around the clock
  • Data backups are performed regularly and stored in geographically separate locations
  • All bossku staff undergo regular data security training
  • KYC data and identity documents are retained for the period required by law, typically 7 years.

While we take all reasonable steps to protect your data, no online system can guarantee absolute security. We encourage you to play your part in keeping your account safe by using a strong password and not sharing your login credentials.

7 Use of Cookies and Tracking Technologies

The bossku platform uses cookies and related tracking technologies to enhance the user experience, secure login sessions, and understand aggregate usage patterns for continuous improvement.

  • Essential Cookies: Required for core platform functions such as login session verification and security — cannot be disabled.
  • Performance Cookies: Collecting anonymous information about how you use the platform to help us improve it
  • Functional Cookies: Saving your preferences such as language and display settings to deliver a more personalised experience
  • Analytics Cookies: Helping us understand overall traffic and usage patterns without identifying you individually

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the bossku platform. Cookies typically expire at the end of a session or within a set period depending on their type.

8 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010, you have certain rights regarding the personal data we hold about you. Bossku is committed to respecting and facilitating the exercise of these rights.

Right of Access

You have the right to request a copy of all personal data we hold about you at any time.

Right to Rectification

You may request that we correct any personal data that is inaccurate or incomplete.

Right to Erasure

You may request the deletion of your personal data, subject to applicable legal obligations.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You may request your data in a machine-readable format for transfer to another platform.

Right to Restrict Processing

You may request that we restrict the processing of your data in certain circumstances provided for by law.

How to Submit a Request: To exercise any of the above rights, contact the bossku support team via live chat on the platform. We will process your request within 14 business days.

9 Children's Data Protection

The bossku platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

Strict Policy: If we discover that personal data of anyone under 18 has been collected without our knowledge, that data will be deleted immediately and the account will be closed. If you have information regarding such a matter, please contact us right away.

Parents and guardians concerned about minors accessing online platforms are encouraged to use appropriate parental control software and to discuss online safety with their children.

10 Links to Third-Party Sites

The bossku platform may contain links or integrations with third-party services such as payment providers and gaming partners. This Privacy Policy applies solely to the bossku platform and does not cover the privacy practices of those third parties.

We encourage you to read the privacy policy of each third-party platform you visit or use separately. bossku is not responsible for the privacy practices or content of third-party websites you may access through our platform.

11 Amendments to This Privacy Policy

Bossku reserves the right to update or amend this Privacy Policy from time to time to reflect changes in law, technology, or platform operations. Any material amendments will be communicated via in-platform notifications or your registered email at least 14 days before the changes take effect.

The "Updated" date at the top of this page reflects when the latest revision was made. We encourage you to review this page periodically. Your continued use of the bossku platform after any revision takes effect will be considered your acceptance of the updated Privacy Policy.

12 How to Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our team. We are committed to responding to all privacy-related enquiries within a reasonable timeframe.

  • 24/7 Live Chat via the bossku platform — the fastest way to get a response
  • Email: [email protected]
  • Via the FAQ us for privacy-related FAQs
Official Complaints: If you are dissatisfied with our response, you have the right to file a formal complaint with the Department of Personal Data Protection Malaysia (JPDP) through their official channels.

Why Your Data Welcome to bossku?

We don't just make promises — every one of these protections is implemented technically and operationally across every layer of the bossku platform.

AES-256 Encryption

Your personal and financial data is protected with military-grade encryption, the same standard used by financial institutions and global security agencies.

Integrated KYC

Our integrated identity verification process ensures that only the true account holder can access funds and make transactions — protecting you from identity fraud.

Secure Servers 24/7

The bossku server infrastructure is monitored around the clock by automated threat detection systems that respond to any suspicious activity in real time.

Malaysia PDPA Compliance

All of bossku's data handling practices fully comply with Malaysia's Personal Data Protection Act 2010, giving you robust legal protection.

No Data Sales

Bossku has never and will never sell, rent, or trade your personal data to advertisers or any third party for their commercial purposes.

Regular Security Audits

The bossku platform undergoes periodic independent security audits by accredited cybersecurity firms to identify and address any vulnerabilities before they can be exploited.

Play Responsibly

Your Data is Protected — Join bossku with Confidence

Now you know how bossku protects your privacy. Register a free account today and enjoy a safe, fair, and exciting gaming experience alongside over 500,000 Malaysian players who already trust us.

Have questions about privacy? Visit FAQ us or contact 24/7 live chat support.

Bahasa Melayu