bos96 Privacy Policy

1. Who We Are and Scope of This Policy

This Privacy Policy applies to bos96 (referred to as "bos96", "we", "us", or "our"), the operator of the online gaming platform accessible at bos96.asia. bos96 acts as the data controller in respect of personal data collected through the Platform.

This Policy applies to all individuals who visit bos96.asia, register a Member account, or otherwise interact with any bos96 service — including the sportsbook, live casino, online slots, lottery, and related features. It applies regardless of the device or location from which you access the Platform, including members located in Kuala Lumpur, Penang, Johor Bahru, Ipoh, Petaling Jaya, and all other parts of Malaysia and internationally.

By accessing bos96.asia or registering a Member account, you acknowledge that you have read and understood this Privacy Policy. Use of the Platform is also subject to bos96's Terms & Conditions.

2. Data We Collect

bos96 collects personal data in the following categories:

2.1 Identity and Contact Data

• Full legal name as it appears on a government-issued identification document
• Date of birth (for age verification purposes — bos96 is strictly 21+)
• Residential address (country, state, postcode)
• Email address and mobile phone number
• Copies of identity documents submitted for KYC verification (e.g., MyKad, passport)

2.2 Account and Transaction Data

• Username, account ID, and account creation date
• Deposit and withdrawal records, including payment method identifiers (e.g., Touch n Go account reference, bank account number last four digits, Boost wallet ID)
• Wallet balance history and bonus records
• Betting history: sports bets placed, casino game sessions, slot spins, lottery entries
• Promotional offer participation and wagering activity

2.3 Technical and Usage Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, browser type and version
• Session timestamps, page views, and navigation paths within the Platform
• Error logs and crash reports associated with your account sessions

2.4 Communications Data

• Content of support chat conversations and email correspondence with the bos96 support team
• Feedback, survey responses, and voluntary information you provide to bos96

3. How We Collect Your Data

bos96 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, or contacting support.
• Automated collection: Technical and usage data collected automatically via cookies, server logs, and analytics tools when you visit or use the Platform.
• Third-party sources: Identity verification data from KYC service providers; fraud detection signals from payment processors; age verification data from identity verification partners.

4. Purposes and Legal Bases for Processing

bos96 processes your personal data for the following purposes:

• Account registration and management: To create and maintain your bos96 Member account, verify your identity and age (21+ requirement), and administer your Wallet.
• Service delivery: To process bets, settle winnings, execute deposits and withdrawals in MYR, and provide access to the gaming products on the Platform.
• Legal and regulatory compliance: To fulfil obligations under applicable gaming licensing requirements, including anti-money laundering (AML) checks, KYC verification, and responsible gaming obligations.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct as defined in bos96's Terms & Conditions.
• Customer support: To respond to enquiries, resolve account issues, and process responsible gaming requests such as self-exclusion.
• Marketing communications: To send promotional offers, bonuses, and platform updates to Members who have not opted out. You may opt out of marketing communications at any time through account settings.
• Platform improvement: To analyse usage patterns, fix bugs, and improve the overall quality and performance of the bos96 Platform.

5. Cookies and Tracking Technologies

bos96 uses cookies and similar tracking technologies on the Platform. Cookies are small data files placed on your device that assist with session management, preference storage, and analytics.

Essential cookies are required for the Platform to function. They manage login sessions, Wallet state, and security tokens. These cannot be disabled without affecting Platform functionality.

Analytics cookies collect anonymised usage data to help bos96 understand how Members navigate the Platform, which games are most popular, and where technical issues occur. This data is processed in aggregate and is not used to identify individual Members.

Preference cookies remember your language, display, and notification settings between sessions.

You may manage cookie preferences through your browser settings. Disabling essential cookies will prevent normal operation of the bos96 Platform, including the ability to log in and place bets.

6. How We Share Your Data

bos96 does not sell personal data to third parties. bos96 may share your data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment processors: Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, and USDT wallet infrastructure providers, to process deposits and withdrawals.
• Identity verification providers: Third-party KYC and age verification services used to confirm Member identity and compliance with the 21+ age requirement.
• Gaming platform providers: Software suppliers (e.g., Evolution Gaming, Pragmatic Play, PG Soft) who provide game content may receive session identifiers to facilitate game play. These providers are contractually bound to process data only for the purpose of delivering game services.
• Fraud and AML service providers: Fraud detection and anti-money laundering screening partners who assist bos96 in identifying prohibited conduct.
• Legal and regulatory authorities: Where required by applicable law, court order, or licensing authority directive, bos96 may disclose Member data to competent authorities.
• Professional advisors: Legal counsel, auditors, and other professional advisors, subject to confidentiality obligations, where reasonably necessary for bos96's business operations.

7. International Data Transfers

bos96 operates globally and your personal data may be transferred to and processed in countries outside Malaysia. Where data is transferred internationally, bos96 ensures that appropriate safeguards are in place — including contractual protections with data processors — to maintain a standard of data protection equivalent to that applied within the Platform's primary operating jurisdiction.

8. Data Retention

bos96 retains personal data for as long as necessary to fulfil the purposes described in this Policy and to comply with applicable legal, regulatory, and licensing obligations. Specific retention periods include:

• Account and transaction data: Retained for a minimum of five (5) years from the date of account closure, in accordance with AML and gaming licensing requirements.
• KYC verification documents: Retained for the duration of the membership and for five (5) years following account closure.
• Support communications: Retained for two (2) years from the date of the relevant interaction.
• Technical and usage logs: Retained for twelve (12) months, after which they are anonymised or deleted.
• Self-exclusion records: Retained for the full duration of the exclusion period and for five (5) years thereafter to prevent re-registration during a permanent exclusion.

9. Security of Your Personal Data

bos96 implements technical and organisational security measures appropriate to the nature of the data held. These measures include 256-bit SSL encryption on all Platform connections, encrypted storage of passwords and sensitive credentials, access controls limiting data access to authorised personnel on a need-to-know basis, regular security audits and penetration testing, and segregation of player funds from operational accounts.

While bos96 takes data security seriously and has maintained a clean security record, no system is entirely immune to risk. If you believe your bos96 account has been accessed without authorisation, contact our support team immediately via live chat.

10. Your Rights

Subject to applicable law and bos96's regulatory obligations, you hold the following rights in relation to your personal data held by bos96:

• Right of access: You may request a copy of the personal data bos96 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to bos96's legal and regulatory retention obligations.
• Right to restrict processing: You may request that bos96 limit the processing of your data in certain circumstances.
• Right to data portability: You may request a structured, machine-readable copy of personal data you have provided to bos96.
• Right to object: You may object to processing of your data for direct marketing purposes at any time. This can be done through account settings or by contacting support.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact bos96 support via live chat or by email at [email protected] (plain text — do not click). bos96 will respond to data rights requests within thirty (30) days. Requests that are manifestly unfounded or excessive may be subject to a reasonable administrative fee.

11. Children and Minors

bos96 does not knowingly collect personal data from any person under the age of 21. The Platform is strictly off-limits to minors. If bos96 becomes aware that a Member account has been registered by a person under 21, the account will be immediately suspended, all funds returned after deduction of any bonuses, and the data purged in accordance with applicable law. If you believe a minor has registered on the Platform, contact support immediately via live chat.

12. Changes to This Privacy Policy

bos96 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered Members via email or through a notice displayed on the Platform. The "Last Reviewed" date at the top of this Policy indicates when it was most recently updated. Continued use of the Platform following notification of changes constitutes acceptance of the revised Policy.

13. Contact and Data Enquiries

For all privacy-related enquiries, data access requests, or concerns about how bos96 handles your personal information, please contact the bos96 data team via live chat inside the Platform (available 24/7) or by written correspondence to: [email protected] (plain text only — copy and paste, do not click).