Privacy Policy Boss96 – Your Personal Data Protection

1 Introduction & Scope of This Policy

Welcome to the boss96 Privacy Policy. This document explains in detail how we, as the operator of the boss96 online betting platform, manage your personal data from the moment you register an account until you stop using our services.

This policy applies to all users of the Boss96 platform, including the official website at boss96.onl, the Boss96 mobile app for Android and iOS, and all related services we offer. It also applies to any individual who browses our website without registering an account.

We take a transparent and responsible approach to data management. Every type of data we collect has a specific and legitimate purpose. We do not collect data that is unnecessary, nor do we retain it longer than required.

As a platform serving users in Malaysia, we fully comply with the Personal Data Protection Act 2010 (PDPA). In the event of any conflict between this policy in another language and the Bahasa Melayu version, the Bahasa Melayu version shall prevail.

2 Types of Personal Data We Collect

Boss96 collects your personal data through several means — directly when you register or use the platform, automatically through tracking technologies, and sometimes through trusted third parties such as payment providers.

We never collect personal data classified as sensitive — such as health information, religious beliefs, or political views — unless required by law.

3 How We Use Your Data

Every piece of data we collect is used for defined and legitimate purposes. We do not use your data for any other purpose without obtaining your consent first. The following are the primary purposes for which your personal data is used:

• Account Management: Creating and maintaining your boss96 account, including the login process, password recovery, and profile updates.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and in a timely manner.
• Identity Verification (KYC): Verifying member identities to comply with anti-money laundering (AML) requirements and applicable gambling regulations.
• Customer Service: Handling inquiries, complaints, and support requests effectively and accurately.
• Platform Security: Detecting and preventing fraud, hacking activity, or account misuse.
• Responsible Wagering: Monitoring wagering patterns to identify members who may need assistance or gameplay limits.
• Service Communications: Sending important notifications relating to your account, transactions, policy changes, and security updates.
• Platform Improvements: Analysing usage data in aggregate (without identifying individuals) to improve user experience and platform performance.

For marketing communications such as promotional offers and bonuses, we only send notifications to members who have given their consent. You may withdraw this consent at any time through your account settings or by contacting our team.

4 Data Sharing With Third Parties

Boss96 does not sell members' personal data to any party for profit. However, there are certain situations where we need to share your information with trusted third parties to enable our services to function properly.

• Payment Providers: Transaction information is shared with integrated payment providers such as banks and e-wallet operators to securely process your deposits and withdrawals.
• Game Providers: Limited game session data is shared with game software providers to ensure games function correctly and results are independently verified.
• Regulatory Authorities: We are required by law to disclose certain information to regulatory bodies, law enforcement agencies, or courts when lawfully requested.
• Analytics Services: Anonymized usage data (containing no personally identifiable information) is shared with analytics services for platform improvement purposes.
• Audit & Compliance: Independent auditors and compliance partners may need to access certain data for verification and security audit purposes.

All third parties working with boss96 are bound by strict confidentiality agreements and are required to uphold data protection standards equal to or higher than our own.

5 Data Security Measures

We continuously invest in best-in-class security infrastructure to ensure your personal data is protected at all times. Below are the layers of protection we have in place:

• 256-bit SSL Encryption: All communications between your device and our servers are encrypted using industry-standard TLS/SSL technology. You can verify this via the padlock icon in your browser's address bar.
• Multi-Layer Access Control: Only specifically authorized personnel may access member data, and every access is logged for audit purposes. Our staff undergo thorough background checks.
• Two-Factor Authentication (2FA): boss96's internal systems require two-factor authentication for all staff access to databases containing member information.
• Firewall & Intrusion Prevention System: Our platform is protected by multi-layer firewalls and a real-time threat monitoring system operating 24 hours a day, 7 days a week.
• Regular Backups: Data is automatically backed up at regular intervals to separate server locations to ensure prompt recovery in the event of any disruption.
• Regular Security Audits: We conduct regular penetration testing and independent security audits to identify and address any system vulnerabilities.

6 Cookies & Tracking Technology

Boss96 uses cookies and similar tracking technologies to enhance the user experience, analyze traffic, and ensure platform security. Cookies are small text files stored on your device by your web browser.

• Essential Cookies: Required for core platform functions such as login authentication and session security. Cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information about how you use our platform — pages visited, time spent, and any errors encountered. All data is aggregated and does not identify individuals.
• Functional Cookies: Saving your preferences such as language, currency, and display settings so you do not need to reconfigure them each time you log in.
• Analytics Cookies: Helping us understand overall usage patterns to improve platform design and content.

You can manage cookie settings through your web browser preferences. However, disabling essential cookies may affect the functionality of the Boss96 platform. Continued use of our platform after this notice is considered consent to the use of cookies as described.

7 Your Rights as a Member

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by Boss96:

• Right of Access: You may request a copy of all personal data we hold about you at any time.
• Right to Rectification: If any of your personal data is inaccurate or outdated, you have the right to request that we correct it promptly.
• Right to Restriction of Processing: In certain circumstances, you may request that we limit how we process your data while a dispute is being resolved.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time, without needing to provide a reason.
• Right to Erasure: You may request the deletion of your personal data, subject to record retention obligations required by law.
• Right to Data Portability: You may request your data in a machine-readable format for transfer to another service provider.

To exercise any of the above rights, contact our support team through the available channels on the platform. We will process your request within the timeframe stipulated by law, typically within 30 business days.

8 Data Retention Period

Boss96 does not retain your personal data longer than necessary for the purposes stated in this policy, unless a longer period is required or permitted by law.

• Active Account Data: For as long as your account remains active, we retain all data necessary to provide our services to you.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian accounting and anti-money laundering legal requirements.
• KYC Records & Identity Verification: Retained for a minimum of 5 years after account closure in accordance with regulatory requirements.
• Support Communication Data: Retained for 2 years after support ticket closure for reference and service quality purposes.
• Security Log Data: Retained for 1 year for security investigation and fraud detection purposes.

Once the retention period expires, data will be securely deleted or permanently anonymized so it can no longer be linked to any individual.

9 Changes to This Privacy Policy

Boss96 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. We are committed to informing you of any significant changes.

When we make material changes, we will display a clear notice on the platform's homepage, send a notification email to your registered address, and update the "Last Updated" date at the top of this document.

Continued use of the boss96 platform after any Privacy Policy changes take effect constitutes your acceptance of the latest version. If you do not agree with the changes, please stop using the platform and contact us to close your account.

We recommend checking this page periodically to stay informed about how we protect your privacy. Previous versions of the Privacy Policy are available upon request from our support team for reference purposes.

10 Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how boss96 handles your personal data, our team is available to assist at any time.

You may also contact us if you wish to exercise any of the data protection rights described in Section 7, or if you suspect any privacy breach involving your account.

For complaints that cannot be resolved internally, you have the right to refer the matter to the Department of Personal Data Protection (JPDP) Malaysia, the regulatory authority responsible under the Personal Data Protection Act 2010.