Privacy Policy Bosplay – Protecting Your Data

1. Introduction

Bosplay takes the protection of your personal data seriously. As an online casino platform operating in Malaysia, we know that player trust is our most valuable asset. This Privacy Policy is written in clear, easy-to-understand language because we believe you deserve to know exactly what happens to your information.

In the context of this Privacy Policy, "personal data" refers to any information that can identify you as an individual, directly or indirectly — from your name and phone number to your gameplay patterns and transaction history on the bosplay platform.

This policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA), which provides legal protection for individuals against the improper processing of personal data. bosplay adheres to all seven PDPA principles, including the General Principle, Notice and Choice Principle, Disclosure Principle, Security Principle, Retention Principle, Data Integrity Principle, and Access Principle.

2. Personal Data We Collect

Bosplay collects various categories of personal data depending on how you interact with our platform. Below is a summary of the data we collect and why:

3. How We Use Your Personal Data

Bosplay uses collected personal data for lawful and transparent purposes. We will not use your data for any purpose not stated here without first obtaining your consent.

The primary purposes for which data is used are as follows:

1. Account management and identity verification – to verify that you are who you claim to be and to process your registration
2. Financial transaction processing – to handle deposits, withdrawals, and financial records accurately and securely
3. Legal compliance requirements – including anti-money laundering (AML) obligations and identity verification (KYC) requirements mandated by law
4. Platform Security – to detect and prevent fraud, unauthorized access, and illegal activity on the bosplay platform
5. Service improvement – to understand how players use the platform and make meaningful improvements
6. Responsible gaming – to monitor gameplay patterns and intervene when necessary to protect players who may need assistance
7. Marketing communications – to inform you about bosplay's latest promotions, bonuses, and offers (with your consent only)
8. Customer Support – to resolve inquiries, complaints, and technical issues effectively

The legal basis for our data processing is: (a) the performance of a service contract between you and bosplay; (b) legal obligations binding on us; (c) the legitimate interests of bosplay in operating safely and responsibly; and (d) your consent for specific purposes such as marketing communications.

4. Data Sharing with Third Parties

Bosplay does not sell your personal data to anyone. Full stop. However, there are specific situations where we need to share your data with trusted third parties in order to deliver our services to you.

Third parties that may receive your data include:

• Payment service providers – such as FPX gateways, digital wallet providers, and banks to process your financial transactions
• Identity verification (KYC) service providers – to verify identity documents and fulfil compliance obligations
• Technology infrastructure providers – including cloud hosting services and cybersecurity service providers
• Game providers – game software providers such as Pragmatic Play and Evolution may receive technical data necessary to run their games on the bosplay platform
• Relevant authorities – when required by law, court order, or direction from a competent authority

All third parties with whom we share data are bound by strict confidentiality and data protection agreements. They are only permitted to use your data for specified purposes and may not use it for any other purpose without bosplay's authorisation.

5. Data Storage & Security

Bosplay stores your personal data on servers protected by industry-standard security measures. Our servers use encryption at rest and encryption in transit to keep your data secure at every stage.

The technical security measures we practise include:

• 256-bit SSL/TLS encryption for all communications between your browser/app and bosplay servers
• Passwords are stored in hashed form using the bcrypt algorithm – we cannot read your password
• Two-factor authentication (2FA) is available for all member accounts
• Round-the-clock security monitoring by our cybersecurity team
• Regular security audits by independent third parties
• Strict access controls – only staff with a legitimate business need may access sensitive data

Regarding data retention, bosplay keeps your personal data for as long as necessary to fulfil the processing purpose or as required by law. Financial transaction data is retained for a minimum of seven years in line with Malaysia's anti-money laundering requirements.

Once your account is closed and the mandatory retention period has expired, bosplay will delete or anonymise your personal data so that it can no longer be associated with you personally.

6. Cookies & Tracking Technologies

The bosplay platform uses cookies and similar tracking technologies to enhance your experience. Cookies are small text files stored by your web browser when you visit the bosplay site. They help us recognise you on subsequent visits and remember your preferences.

You can control and manage cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of the bosplay platform. For more information on managing cookies in your browser, refer to your browser's help documentation.

7. Your Rights Under PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data processed by bosplay:

To exercise any of the above rights, please contact the bosplay privacy team via the live support chat within the platform or mobile app. We may need to verify your identity before processing certain requests in order to protect the security of your account.

8. Children's Privacy

The bosplay platform is for users aged 18 and above only. We do not knowingly collect or process personal data of individuals under the age of 18. If we discover that a child's data has been collected inadvertently, we will take immediate steps to delete that data and close the relevant account.

If you are a parent or guardian who believes your child has registered a bosplay account, please contact our support team immediately. We will investigate and take appropriate action within 48 hours.

9. Amendments to This Privacy Policy

Bosplay reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, applicable law, or improvements in how we protect your data. The "Updated" date at the top of this document will be revised whenever changes are made.

For material amendments that substantially affect your rights, bosplay will notify you via your registered email or an in-platform notice at least 14 days before the changes take effect. Continued use of the bosplay platform after the changes take effect constitutes your acceptance of the amended policy.

10. Contact Our Privacy Team

If you have any questions, concerns, or requests regarding this Privacy Policy or how bosplay handles your personal data, our privacy team is ready to help.

The fastest way to reach us is via the live support chat available 24 hours a day within the bosplay platform or mobile app. You can also contact us by email at the address listed in the footer of this page. All privacy-related enquiries will be responded to within 3 business days.