Privacy Policy bosspay99 – Malaysia Member Data Protection & Privacy

01 Introduction & Scope of This Policy

Bosspay99 is an online entertainment platform committed to protecting the personal data of all its users. We understand that your trust is our most valuable asset, and we are responsible for ensuring that every piece of information you share with us is handled in a safe, responsible, and transparent manner.

This Privacy Policy applies to all information collected through the bosspay99.vu website, the bosspay99 mobile app, and any of our official communication channels including email and live chat. This document describes the types of data we collect, the purposes for collection, the parties who may receive your data, and the rights you hold as the data owner.

We encourage you to read this document carefully in full. If you have any questions or concerns about how we handle your data, the bosspay99 support team is available to assist you at any time.

02 Types of Personal Data We Collect

Bosspay99 only collects data that is strictly necessary for legitimate purposes in operating the platform and providing the best service to our members. The data we collect falls into three main categories:

Identity & Registration Data

• Full name as it appears on your official identity document.
• Date of birth for age verification purposes (18 years and above).
• Active email address and mobile phone number.
• Identity card number (MyKad) or passport number for the KYC process.
• Current residential address for legal compliance purposes.

Financial & Transaction Data

• Bank account number or digital wallet details (TNG eWallet, GrabPay) for payment processing.
• Records of deposit and withdrawal transactions on the bosspay99 platform.
• Debit card information used for deposits (full card numbers are not stored — only the last 4 digits are retained for reference).
• Betting history and game activity for internal audit and compliance purposes.

Technical & Usage Data

• IP address, device type, operating system, and web browser used.
• Access log data including dates, times, and pages visited within the platform.
• Cookie data and session identifiers to facilitate login and navigation experience.
• Country-level geolocation data to ensure compliance with regional regulations.

03 How We Use Your Data

Every piece of data we collect is used for a specific and legitimate purpose. bosspay99 does not use your data for any purpose other than those stated below, except with your explicit prior consent.

• Account management: To create, verify, and manage your member account on the bosspay99 platform, including the required KYC process.
• Transaction processing: To process deposits and withdrawals safely and efficiently through our partnered payment providers.
• Platform security: To detect and prevent fraud, unauthorised access, money laundering, and any suspicious activity that could compromise the security of other members.
• Legal compliance: To fulfil reporting obligations to the relevant authorities when required by Malaysian law.
• Service improvements: To analyse aggregated platform usage patterns in order to improve user experience, enhance existing features, and develop new games or services.
• Service communications: To send important notifications related to your account, transactions, terms updates, and security information.
• Optional marketing: To send promotions, bonus offers, and the latest campaign information — only if you have given consent to receive marketing communications.

04 Data Sharing & Disclosure

Bosspay99 does not sell or rent your personal data to any party for commercial purposes. However, there are limited situations where we need to share your data with certain parties:

• Payment providers: Transaction details that must be shared with payment processors such as banks and digital wallet operators to complete your transactions.
• Game providers: Game session information required by licensed game software providers to ensure the fairness and integrity of every game.
• Authorities: bosspay99 will disclose the required data to law enforcement authorities or regulatory bodies when mandated by a court order or applicable law.
• Technology service providers: Companies providing IT infrastructure, server hosting, and cybersecurity services to bosspay99 — all bound by strict confidentiality agreements.
• Fraud investigation: In situations where there is reasonable suspicion of fraud, money laundering, or serious platform abuse.

In all data-sharing situations described above, bosspay99 ensures that all receiving parties are bound by confidentiality and data protection obligations equal to or stricter than the standards we uphold.

05 Security & Data Protection

Your data security is the absolute top priority of bosspay99. We continuously invest in the latest cybersecurity infrastructure to ensure your data is always protected against both external and internal threats.

• 256-bit SSL Encryption: All data transmitted between your device and bosspay99 servers is protected with industry-grade encryption — the same standard used by leading financial institutions worldwide.
• Two-factor authentication (2FA): An additional security layer is available for all member accounts to prevent unauthorized access even if your password is compromised.
• 24/7 Monitoring: The bosspay99 IT security team monitors platform activity around the clock to detect and respond to any threats in real time.
• Regular security audits: The bosspay99 platform undergoes regular independent security audits by accredited cybersecurity firms to identify and address any potential vulnerabilities.
• Segregated data storage: Member personal data is stored on servers separate from platform operational data with strict access controls.

While we implement these comprehensive technical measures, no security system can be guaranteed 100% secure. We encourage you to also take personal protective steps, such as using a strong and unique password and never sharing your login details with anyone.

06 Cookie Usage (Cookies)

The bosspay99 platform uses cookies to enhance your experience while browsing our website. Cookies are small text files stored on your device when you visit our website.

• Essential cookies: Required for core platform functions such as login sessions, security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collects information about how you use our platform in aggregated form without personally identifying you. This helps us improve website performance and usability.
• Functional cookies: Stores your preferences such as preferred language, region, and display settings for a more personalized experience.
• Analytical cookies: We use analytics tools to understand overall platform usage patterns. All analytics data is anonymised and used solely for improvement purposes.

You can manage or disable cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of some bosspay99 platform features.

07 Your Privacy Rights as a Member

As a bosspay99 member and in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the bosspay99 privacy team by email at [email protected] or via live chat within the platform. We will process your request within 30 business days.

08 Data Retention Period

Bosspay99 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy or as required by applicable Malaysian law.

• Active account data is retained for as long as your account remains active on the bosspay99 platform.
• After account closure, identity and KYC data is retained for 5 years in line with anti-money laundering (AML) compliance requirements.
• Financial transaction records are retained for 7 years as required by the Companies Act and Malaysian financial reporting regulations.
• Customer support communication data is retained for 3 years for the purposes of resolving any disputes that may arise.
• Technical data and system logs are retained for 2 years for security and fraud detection purposes.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered.

09 Child Protection

The bosspay99 platform is exclusively for adult users aged 18 and above. We do not knowingly collect or process personal data of any individual under the age of 18.

If we discover that we have inadvertently collected data from an underage individual, that data will be deleted immediately and the associated account will be terminated. Parents or guardians who believe their child may have registered an account on the bosspay99 platform are encouraged to contact us promptly through our support channels.

10 Privacy Policy Amendments

Bosspay99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service improvements. The "Updated" date shown at the top of this page will always reflect the date of the most recent amendment.

For amendments deemed material or significant, bosspay99 will notify members via in-platform notifications or their registered email at least 14 days before the changes take effect. Continued use of the platform after the effective date constitutes acceptance of the amended Privacy Policy.

11 Contact Our Privacy Team

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Privacy Email: [email protected] – for specific privacy enquiries and data rights requests.
• Support Email: [email protected] – for general enquiries about the platform.
• Live Chat 24/7: Available directly within the bosspay99 platform for an immediate response.
• FAQ: Visit FAQ page for answers to frequently asked questions.

We are committed to responding to all privacy-related enquiries within 72 hours on business days. For formal data rights requests, the processing period is up to 30 business days.