Privacy Policy — Bossku2

1. Introduction

This Privacy Policy ("Policy") describes how Bossku2 ("Bossku2", "we", "us", "our") collects, processes, stores, and shares personal data relating to you ("Player", "User", "you") when you visit, register with, or use the services available at bossku2.cam

By registering an account or continuing to access the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not register or continue to use the Platform.

Bossku2 is committed to handling all personal data responsibly, transparently, and in accordance with applicable data protection legislation and the requirements of our gaming licence authority. We collect only what is necessary and use it only for clearly defined, legitimate purposes.

2. Definitions

For the purposes of this Privacy Policy:

• "Personal Data" means any information that identifies or can reasonably be used to identify you as an individual, including your name, Malaysian IC number, email address, phone number, residential address, IP address, and payment instrument details.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" refers to Bossku2, which determines the purposes and means of processing Personal Data.
• "Data Processor" refers to any third party that processes Personal Data on behalf of Bossku2 under a contractual arrangement that includes appropriate data protection obligations.
• "KYC Data" refers to identity documents and verification records collected in the course of Know Your Customer procedures, including MyKad, passport copies, proof of address, and payment method ownership evidence.
• "Cookies" refers to small text files placed on your device by the Platform to enable functionality, session management, analytics, and personalisation.
• "Consent" refers to a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.

3. Data We Collect

3.1 Data You Provide Directly

When you register an Account or interact with our Platform, we collect the following categories of Personal Data:

• Identity Data: Full legal name, date of birth, nationality, Malaysian IC number or passport number;
• Contact Data: Email address, mobile phone number, residential address (including city — Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or elsewhere in Malaysia);
• Financial Data: Payment method details, transaction history, deposit and withdrawal records denominated in MYR or cryptocurrency (USDT/BTC);
• KYC Documentation: Government-issued identification documents, proof of address, and payment ownership evidence submitted during the verification process;
• Communications Data: Records of your interactions with our customer support team via live chat, WhatsApp, or email correspondence.

3.2 Data Collected Automatically

When you access the Platform, we automatically collect certain technical and behavioural data, including:

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Session duration, pages visited, and navigation patterns;
• Game activity logs, including wager amounts, game types, session timestamps, and outcomes;
• Login timestamps and authentication events.

3.3 Data from Third Parties

We may receive Personal Data about you from third-party service providers in the following circumstances:

• Identity verification services that validate the authenticity of KYC documents;
• Payment processors (including those facilitating Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, and Public Bank transactions) to confirm payment status and prevent fraud;
• Fraud detection and anti-moneylaundering (AML) screening services that cross-reference your data against watchlists or sanction registers.

4. How We Use Your Data

The table below summarises the primary purposes for which Bossku2 processes your Personal Data and the corresponding legal basis for each purpose.

5. Legal Basis for Processing

Bossku2 processes your Personal Data one or more of the following legal grounds:

• Contract Performance: Processing is necessary to deliver the services you have requested by registering and using the Platform;
• Legal Obligation: Processing is required to comply with applicable laws, including anti-money-laundering (AML) regulations, gaming licence conditions, and identity verification requirements;
• Legitimate Interests: Processing is necessary for our legitimate business interests — including platform security, fraud prevention, and service improvement — provided those interests do not override your fundamental privacy rights;
• Consent: For marketing communications, analytics cookies, and any processing not covered by the above grounds, we rely on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

6. Disclosure to Third Parties

Bossku2 does not sell your Personal Data. We may share your data with carefully selected third-party service providers who process data on our behalf under binding data processing agreements. These include:

• Payment Processors: Entities facilitating MYR deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Visa, Mastercard, Maybank, CIMB, Public Bank, Hong Leong, and RHB, as well as cryptocurrency settlement providers for USDT and BTC transactions;
• Identity Verification Providers: Third-party KYC and AML service providers used to verify the authenticity of identity documents and screen against sanction and watchlists;
• Game Content Providers: Licensed software developers supplying the slot, live dealer, and sports betting products hosted on the Platform. These providers may receive anonymised game session data for technical support and audit purposes;
• Technology & Infrastructure: Cloud hosting, content delivery, and cybersecurity providers who process data solely to deliver and protect our Platform infrastructure;
• Regulatory and Legal Authorities: Where required by law, court order, or the direction of a competent regulatory authority, we will disclose Personal Data to the relevant body.

7. International Data Transfers

Some of the third-party service providers engaged by Bossku2 may operate or store data in jurisdictions outside Malaysia. Where Personal Data is transferred internationally, Bossku2 ensures that appropriate safeguards are in place, including:

• Contractual clauses that impose data protection standards equivalent to those under our licence jurisdiction;
• Transfer only to jurisdictions recognised as providing adequate protection under applicable data protection standards;
• Binding corporate rules or equivalent frameworks where applicable to the relevant processor.

You may request information about the safeguards applicable to any specific international transfer by contacting our support team.

8. Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files stored on your device when you visit the Platform. Bossku2 uses cookies and similar tracking technologies to enable essential Platform functions, maintain your session, remember your preferences, and analyse how you use the site.

8.2 Categories of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These enable login sessions, security features, and core navigation. They cannot be disabled without breaking core functionality.
• Functional Cookies: Remember your preferences such as language settings, display options, and preferred payment method to improve your experience on return visits.
• Analytical Cookies: Collect aggregated, anonymised data about how visitors interact with the Platform — which pages are visited most frequently, session durations, and navigation patterns — to help us improve our service.
• Marketing Cookies: Used only with your explicit consent to personalise promotional communications based on your activity the Platform. You may opt out at any time.

8.3 Managing Cookies

You may configure your browser to refuse all or some cookies, or to alert you when cookies are being set. Note that disabling strictly necessary cookies will impair the functionality of the Platform. For analytical and marketing cookies, your consent may be withdrawn at any time via your account privacy settings.

9. Data Retention

Bossku2 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory retention obligations, and to resolve any disputes or enforce our agreements. The following indicative retention periods apply:

• Account and Identity Data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in line with AML regulatory requirements;
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction to comply with applicable financial recordkeping regulations;
• KYC Documents: Retained for a minimum of five (5) years following the completion of the relevant verification process or account closure, whichever is later;
• Customer Support Records: Retained for three (3) years from the date of the last interaction;
• Marketing Consent Records: Retained until consent is withdrawn and for one (1) year thereafter as evidence of the consent history;
• Analytical and Technical Data: Retained in anonymised or aggregated form for up to two (2) years from collection.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised so that it can no longer be linked to an individual.

10. Data Security

Bossku2 implements a comprehensive set of technical and organisational security measures to protect Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted in transit;
• Encryption at Rest: Sensitive Personal Data stored on our servers — including payment details and identity documents — is encrypted at rest using industry-standard algorithms;
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. Staff with access undergo background screening and regular privacy training;
• Two-Factor Authentication (2FA): Available and encouraged for all Player accounts to add an additional layer of protection beyond password credentials;
• Regular Security Audits: Our platform and infrastructure undergo regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Incident Response: We maintain a documented data breach response procedure. In the event of a breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant regulatory authority as required by applicable law.

While we take all reasonable precautions, no method of transmission over the internet or electronic storage is completely secure. You are also responsible for maintaining the security of your Account credentials and for reporting any suspected unauthorised access immediately.

11. Your Rights

Subject to applicable law and certain limitations, you have the following rights with respect to your Personal Data held by Bossku2:

To exercise any of the above rights, please contact our support team at [email protected] (plain text — not a clickable link). We will respond to all verified requests within 30 days. In some cases, we may need to verify your identity before processing a request.

12. Protection of Minors

The Bossku2 Platform is strictly restricted to individuals who are at least 21 years of age. We do not knowingly collect Personal Data from individuals under this age. Age verification is a mandatory step in our KYC process, and any Account found to belong to an individual under 21 will be immediately closed, with all balances returned to the funding source.

13. Changes to This Privacy Policy

Bossku2 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Material changes will be communicated to registered Players via in-platform notification or email no later than fourteen (14) days before the change takes effect.

The effective date of the most recent revision is displayed at the top of this page. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy. If you do not agree with the amended Policy, you must cease using the Platform and request Account closure.

We encourage all Players to review this Policy periodically to remain informed about how their Personal Data is being protected.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your Personal Data, please contact the Bossku2 Privacy Team through the following channel:

For enquiries related to responsible gambling, self-exclusion, or account restrictions, please visit our Responsible Gambling page or raise the matter directly with our support team.

For general platform questions and answers about deposits, withdrawals, and bonuses, see our FAQ page.