Bosspay99 Privacy Policy – Personal Data Protection for Malaysian Members

1Introduction & Scope of This Privacy Policy

bosspay99 ("we", "platform") cares about the privacy of every Malaysian member who entrusts their personal data to us. This Privacy Policy clearly explains how bosspay99 collects, processes, stores, uses, and in certain circumstances, discloses the personal information you provide while using our platform.

This Policy applies to all registered members and users accessing the official website or mobile application of bosspay99, regardless of whether you access the platform via desktop, smartphone, or tablet. It covers all services we offer — from Sports Betting on the Malaysia Super League and EPL, Live Casino games, slots, jackpots, and table games, to e-sports such as MPL Malaysia and Valorant.

We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), and we are committed to ensuring that all personal data processing is carried out lawfully, fairly, and transparently. In the event of any conflict between the Bahasa Malaysia version and any other translation of this document, the Bahasa Malaysia version shall prevail.

2Types of Personal Data We Collect

bosspay99 collects various types of personal data depending on how you interact with our platform. The following are the main categories of data we collect:

Data We Do Not Collect: bosspay99 does not collect sensitive information such as biometric data, health information, or political affiliations. We also do not collect credit card numbers directly, as all transactions are processed through payment providers with their own security standards, including Touch 'n Go, GrabPay, and FPX.

All data you provide to bosspay99 is entirely voluntary, except for information required to meet legal and compliance obligations such as identity verification prior to withdrawal. If you choose not to provide certain information, it may limit your ability to use some features on the platform.

3How We Use Your Personal Data

bosspay99 uses the personal data we collect for legitimate and necessary purposes in order to operate our services for Malaysian members. The following are the primary purposes for which your data is used:

• Account Management: Creating, maintaining, and securing your account bosspay99 your account. This includes processing your registration, setting your password, and ensuring that only you can access your account.
• Transaction Processing: Processing all deposits and withdrawals you make via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, and CIMB Clicks in Malaysian Ringgit (RM). This requires us to transmit the necessary information to the relevant payment providers.
• Service Delivery: Enabling you to access and enjoy all games on bosspay99 — from Sports Betting, Live Casino, slots, jackpots, table games, to E-Sports. This includes storing your betting history, account balance, and transaction records.
• Customer Support: Providing relevant assistance when you contact us via Live Chat, WhatsApp, or email. Communication data is retained for quality control and training purposes.
• Security & Fraud Prevention: Identifying and preventing fraudulent activity, money laundering, multiple accounts, and system abuse that could harm other members and the integrity of the platform bosspay99.
• Legal Compliance: To fulfil applicable legal and regulatory obligations, including anti-money laundering (AML) and know your customer (KYC) compliance requirements.
• Platform Improvement: Analysing usage patterns on an aggregated and anonymised basis to understand how members use bosspay99 and make improvements to the interface, performance, and game offerings.
• Marketing Communications: Sending you information about promotions, bonuses, and new offers on bosspay99 to you — but only if you have given consent to receive marketing communications. You may unsubscribe at any time.

bosspay99 does not use your personal data for any purpose other than those stated above without first obtaining your additional consent.

4Sharing Personal Data with Third Parties

bosspay99 does not sell or trade the personal data of Malaysian members to any party for commercial purposes. However, in the course of operating our platform, there are limited situations in which your data may be shared with selected third parties:

• Payment Providers: Data required to process your financial transactions is shared with the relevant provider — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or your chosen FPX provider. Each of these providers is bound by their own privacy policies and industry security standards.
• Technical Service Provider: We engage selected third-party technical service providers for specific functions such as server hosting, data analytics, and technical support. All such providers are bound by strict confidentiality agreements and are only permitted to process your data in accordance with bosspay99.
• Game Provider: Some game-related information may be shared with game providers such as Evolution Gaming, Pragmatic Play, SA Gaming, and others for dispute resolution and audit purposes. This does not include more sensitive financial information.
• Legal Authority: bosspay99 may be required by law to disclose personal information to the relevant Malaysian authorities, such as the police, judicial bodies, or regulators, where there is a valid court order or binding legal compliance requirement.

In all data-sharing instances, bosspay99 ensures that recipient parties are subject to appropriate confidentiality obligations and only use the data for the specified purposes. We do not permit third parties to use our members' data for their own independent marketing purposes.

5Cookies, Tracking Technologies & Analytics

bosspay99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. We use several types of cookies:

• Essential Cookies: Required for core platform functions such as maintaining your login session, remembering items in your bet slip, and keeping your account secure. These cookies cannot be disabled as the platform cannot function without them.
• Performance Cookies: Collecting information about how you use bosspay99 — which pages you visit, how long you spend on each page, and any error messages you encounter. All such information is anonymous and aggregated, used solely to improve platform performance.
• Functional Cookies: Remembering your preferences and settings on bosspay99 such as language preference, display settings, and notification preferences to provide a more personalised experience tailored to your needs.
• Analytical Cookies: Helping us gain a deeper understanding of how Malaysian members use the platform. This data is used internally to inform product and service improvement decisions.

You can manage and control cookies through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality of some parts of the platform. bosspay99. For more information on how to manage cookies in your browser, refer to your browser's help documentation.

bosspay99 does not use cross-site tracking technologies that could monitor your activity on other websites outside our platform.

6Data Security Measures at bosspay99

bosspay99 continuously invests in security infrastructure to protect our members' personal data from unauthorised access, disclosure, alteration, or destruction. The key security measures we have in place include:

• SSL/TLS Encryption: All communications between your device and the bosspay99 encrypted using 256-bit SSL/TLS protocol. This ensures that sensitive information such as passwords and payment details cannot be intercepted during transmission.
• Secure Data Storage: Members' personal data is stored on servers protected by strict access controls. Only staff bosspay99 with a legitimate operational need are permitted to access members' personal data.
• Two-Factor Authentication (2FA): We encourage all members to enable two-factor authentication on their accounts for an added layer of protection. This ensures that even if your password is compromised, an additional verification step is still required to log in.
• Continuous Security Monitoring: Our systems are continuously monitored to detect any suspicious activity or unauthorised access attempts. Our intrusion detection system (IDS) operates around the clock to safeguard member data.
• Regular Security Audits: bosspay99 conduct regular security audits carried out by independent cybersecurity experts to ensure our data protection systems remain aligned with the latest industry standards.
• Staff Training: All staff bosspay99 with access to members' personal data undergo comprehensive data protection training and are bound by strict confidentiality agreements.

While we take all reasonable steps to protect your data, no security system can guarantee absolute 100% protection. You also play an important role in safeguarding your account by using a strong password and keeping it confidential.

7Data Retention & Deletion

bosspay99 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable Malaysian law. The following are general guidelines on data retention periods:

• Active Account Data: For as long as your account remains active with bosspay99, your personal data and activity history will be retained for account management and customer support purposes.
• Financial Transaction Data: Financial transaction records in Malaysian Ringgit (RM) are retained for a minimum of 7 years from the transaction date, in line with Malaysia's accounting legislation and AML compliance requirements.
• KYC Records (Identity Verification): Identity verification documents such as copies of IC or passport are retained for a minimum of 5 years after the business relationship ends, in line with Malaysia's AMLA requirements.
• Support Communication Logs: Live Chat conversation records, emails, and WhatsApp messages with our support team are retained for 2 years for quality control and dispute resolution purposes.
• Closed Account Data: After you close your account bosspay99, your personal data will be scheduled for deletion or anonymisation within 90 days, except for data that must be retained to comply with legal requirements.

Once the specified retention period has expired, bosspay99 will securely delete or anonymise that data using industry-recognised methods. You may request details on the specific retention period for your personal data by contacting our Privacy Officer.

8Your Rights as a User under the PDPA

As a member of bosspay99 who are based in Malaysia, you have the following rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA) and this Privacy Policy:

To exercise any of the rights listed above, please contact the Privacy Officer bosspay99 via email at support@bosspay99.xyz or via Live Chat 24/7. Please include your full name, account number, and the specific details of your request. We will endeavour to process your request within 14 business days.

Please note that these rights are not absolute and may be subject to certain exemptions under Malaysia's PDPA. For example, we may be unable to delete your financial transaction records where they are required for anti-money laundering compliance purposes.

9Protection of Children's Data

bosspay99 is an online entertainment platform intended exclusively for adults aged 18 years and above only. We do not knowingly collect personal data from individuals under the age of 18. If we discover that we have inadvertently collected personal data from someone under 18, we will take immediate steps to delete that data and close the relevant account.

If you, as a parent or guardian, believe that your underage child has registered an account with bosspay99, please contact us immediately at support@bosspay99.xyz with the necessary information. We will investigate and take appropriate action as promptly as possible.

bosspay99 encourages parents and guardians to actively monitor their children's online activities and use appropriate parental control software to prevent unauthorised access to adult entertainment platforms.

10Changes to This Privacy Policy

bosspay99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, new legal requirements, or improvements to our services. When we make material changes to this Privacy Policy, we will take reasonable steps to notify you, including:

• Displaying a clear notice on the platform's main page bosspay99 about Privacy Policy updates.
• Sending a notification via email to the address registered with your account when changes are material and significantly affect your privacy rights.
• Displaying an updated "Last Updated" date at the top of this document.

We recommend checking this Privacy Policy page periodically to stay informed of our latest privacy practices bosspay99. Continued use of the platform after any Privacy Policy changes take effect will be considered acceptance of the updated terms.

11Contact the bosspay99 Privacy Officer

If you have any questions, concerns, or complaints regarding how bosspay99 handles your personal data, or if you wish to exercise any of your privacy rights, please contact our Privacy Officer through the following channels:

When contacting us regarding data privacy, please include your full name and account ID number. bosspay99, your registered Malaysian phone number, and a detailed description of your request or concern. This information helps us process your request more quickly and accurately.

If you are not satisfied with how we have handled your privacy request or complaint, you have the right to lodge a complaint with the Department of Personal Data Protection under the Malaysian Ministry of Digital, which is the PDPA regulatory body in Malaysia.