bosku88 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how bosku88 ("the Platform", "we", "us", "our") collects, processes, stores, and shares personal data obtained from individuals ("you", "User", "Player") who access or use the bosku88 website at bosku88.club and all associated services. This Policy applies to all registered and unregistered visitors to the Platform.

bosku88 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection law and the requirements of our international gaming authority licence. By using the bosku88 platform, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

bosku88 is the data controller responsible for the personal data collected through bosku88.club. For all privacy-related enquiries, requests, or complaints, please contact our Data Protection team via email at [email protected]. Enquiries will be acknowledged within 5 business days and responded to fully within 30 calendar days.

3. Personal Data We Collect

bosku88 collects the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification document details (Malaysian IC, passport) collected as part of KYC verification.
• Contact Data: Email address, Malaysian mobile telephone number, and residential address.
• Financial Data: Bank account details, e-wallet identifiers (Touch n Go eWallet, Boost), and transaction history within the Platform.
• Account Data: Username, encrypted password, account preferences, gaming history, bet records, deposit and withdrawal records, and bonus activity.
• Technical Data: IP address, browser type and version, device type and operating system, time zone, and session duration data collected automatically when you access the Platform.
• Communications Data: Records of your interactions with bosku88 customer support, including live chat transcripts and email correspondence.

4. How We Collect Your Data

bosku88 collects personal data through the following means:

• Direct Interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, claiming bonuses, or contacting customer support.
• Automated Technologies: Technical data collected automatically through cookies, server logs, and similar tracking technologies as you navigate the Platform.
• Third Parties: Identity verification data from KYC service providers, fraud prevention data from risk management partners, and payment confirmation data from payment processors.

5. Purposes and Legal Basis for Processing

bosku88 processes your personal data for the following purposes and on the following legal bases:

• Account Administration (Contract): To create and manage your bosku88 account, process deposits and withdrawals, and deliver gaming services.
• Identity Verification / KYC (Legal Obligation): To verify your identity and age in compliance with our international gaming licence obligations and applicable anti-money laundering law.
• Fraud Prevention and Security (Legitimate Interest): To detect and prevent fraudulent activity, account misuse, and security threats.
• Responsible Gaming Compliance (Legal Obligation / Contract): To monitor gaming patterns, enforce deposit and session limits, and facilitate self-exclusion requests.
• Customer Support (Contract): To respond to your queries and resolve complaints.
• Platform Improvement (Legitimate Interest): To analyse aggregated, anonymised usage data to improve Platform performance and user experience.
• Marketing Communications (Consent): To send promotional communications where you have explicitly opted in. You may withdraw consent at any time via account settings or by contacting support.

6. Sharing of Personal Data

bosku88 does not sell or rent your personal data to third parties. We may share your data with the following categories of recipients only to the extent necessary for the purposes described above:

• KYC and Identity Verification Providers: Third-party identity verification services engaged to confirm the authenticity of documents submitted during account registration.
• Payment Processors: Financial institutions, banks, and e-wallet operators (including Touch n Go eWallet and Boost integrations) required to process deposits and withdrawals in MYR.
• Game Content Providers: Game studios and live casino providers who may receive anonymised session data necessary to deliver their content through the bosku88 platform.
• Regulatory Authorities: Gaming licensing authorities and law enforcement agencies where disclosure is required by law or licence condition.
• Fraud Prevention Services: Risk management and fraud detection providers used to protect the integrity of the Platform.

All third-party service providers engaged by bosku88 are contractually required to handle personal data in accordance with applicable data protection standards and are prohibited from using your data for their own independent purposes.

7. International Data Transfers

bosku88 may transfer personal data to servers or service providers located outside Malaysia where necessary to operate the Platform. Where such transfers occur, bosku88 ensures that adequate safeguards are in place — including contractual data protection clauses — to protect your personal data to a standard equivalent to that applied within Malaysia.

8. Data Retention

bosku88 retains personal data for the following periods:

• Account and transaction data is retained for a minimum of five (5) years from the date of account closure, in accordance with our gaming licence anti-money laundering obligations.
• KYC documentation is retained for a minimum of five (5) years from the date of collection or the date of the last transaction, whichever is later.
• Marketing consent records are retained for as long as you remain an active subscriber, plus two (2) years following unsubscription.
• Support communications are retained for two (2) years from the date of the interaction.

Following the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

9. Cookies and Tracking Technologies

bosku88 uses the following categories of cookies on the Platform:

• Strictly Necessary Cookies: Required for Platform operation, including session management and security tokens. These cannot be disabled.
• Performance and Analytics Cookies: Used to understand how players interact with the Platform in order to improve functionality. Data collected is aggregated and anonymised.
• Functional Cookies: Used to remember your preferences, such as language settings and login status on trusted devices.

bosku88 does not use advertising or behavioural tracking cookies. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair Platform functionality.

10. Your Rights as a Data Subject

Subject to applicable law, you have the following rights in relation to your personal data held by bosku88:

• Right of Access: Request a copy of the personal data bosku88 holds about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to Restriction: Request that we restrict processing of your data in certain circumstances.
• Right to Object: Object to processing based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact bosku88 support via email at [email protected]. Requests will be responded to within 30 calendar days. Verification of identity may be required before a request can be actioned.

11. Security Measures

bosku88 implements technical and organisational security measures proportionate to the sensitivity of the personal data processed. These include 256-bit SSL encryption on all data transmissions, password hashing using industry-standard algorithms, access controls restricting data access to authorised personnel only, intrusion detection systems, and regular security assessments of Platform infrastructure. While bosku88 applies robust security measures, no system is entirely immune from risk. In the event of a data breach that is likely to result in risk to your rights, bosku88 will notify affected players and the relevant authorities as required by law.

12. Children and Minors

bosku88 strictly prohibits access to the Platform by individuals under the age of 21. We do not knowingly collect personal data from persons under 21. Where bosku88 becomes aware that personal data has been collected from an underage individual, that account will be immediately suspended, the data will be deleted in accordance with applicable law, and any deposits will be returned. If you have reason to believe a minor has registered on bosku88, please contact our support team immediately.

13. Changes to This Policy

bosku88 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform functionality. Material updates will be communicated to registered players via email or prominent notice on the Platform prior to the effective date of the change. The "Last Updated" date at the top of this Policy indicates when the most recent version took effect. Continued use of the Platform following a policy update constitutes acceptance of the revised Policy.

14. Contact and Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by bosku88, please contact our Data Protection team at: [email protected]. Our team is available 24/7 via live chat on the Platform for urgent account security matters.

If you are unsatisfied with our response, you have the right to escalate your complaint to the data protection supervisory authority in your jurisdiction, or to the dispute resolution body specified by our gaming licence authority.