At boss98, your privacy is not merely a legal obligation — it is our genuine commitment. This page transparently explains how we collect, use, store, and protect your personal information every time you use our platform.
Six core principles that shape how boss98 handles users' personal data.
All data transmitted between your device and boss98 servers is protected with SSL 256-bit encryption — the same security technology used by leading banking institutions in Malaysia.
Boss98 has never sold, rented, or traded your personal information to any third party for marketing or any other commercial purpose, and never will.
You have the right to access, amend, and request deletion of your personal data from the boss98 system at any time. Such requests are processed within 14 business days.
Boss98 user data is stored on servers protected by multiple layers of physical and digital security, with access restricted to authorized personnel only.
The boss98 privacy policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international standards to ensure your rights are always protected.
In the event of any security breach affecting your data, boss98 will notify you within 72 hours via your registered email and an in-platform notice.
Boss98 collects your personal information through several means — directly from you, automatically through your use of the platform, and in some cases from trusted third parties. Understanding what we collect helps you make more informed decisions about your privacy.
Information you provide directly:
Automatically collected information:
boss98 does not directly collect your credit or debit card information. All payments are processed through PCI-DSS certified third-party payment gateways, meaning your card data never touches our servers.
Every piece of data boss98 collects is used for specific and legitimate purposes. We do not use your data beyond what is stated in this Privacy Policy without first obtaining your additional consent.
| Purpose of Use | Types of Data Used | Legal Basis |
|---|---|---|
| Account management & login | Name, email, password (encrypted) | Contract Performance |
| Deposit & withdrawal processing | Banking details, transaction history | Contract Performance |
| Identity verification (KYC) | IC/Passport, verification selfie | Legal Obligation |
| Fraud prevention & security | IP address, session data, Login behaviour | Boss98's Legitimate Interests |
| Customer support | Chat history, account information | Contract Performance |
| Regulatory compliance & AML | Transaction data, full KYC | Legal Obligation |
| Platform improvement & analytics | Anonymised usage data | Boss98's Legitimate Interests |
Boss98 does not use your data for third-party advertising or to build user profiles for external commercial purposes. If you receive promotional communications from boss98, they are based on your own account activity — not from externally purchased data.
Boss98 does not share your personal information except in the following limited and defined situations:
boss98 never shares user data with advertising companies, third-party analytics firms, or any entity with no legitimate need to access it. This is an absolute policy with no exceptions.
Boss98 uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us remember your preferences and track your session.
Types of cookies boss98 uses:
You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect some features of the boss98 platform.
boss98 does not use third-party cookies for targeted advertising. We also do not allow advertising networks to place tracking cookies on our platform.
User data security is a core technical priority at boss98. We continuously invest in security infrastructure to ensure your information stays protected at all times.
Technical security measures we implement include:
While no system is 100% secure against all threats, boss98 takes all reasonable measures to minimize risk and protect your data from unauthorized access.
Boss98 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law.
Once the retention period expires, your data will be securely deleted or anonymized so it can no longer be linked back to you.
If you close your boss98 account, data no longer required for legal or contractual purposes will be deleted within 30 days. Data that must be retained for legal compliance will be kept only for the period required by law.
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and boss98's internal policies, you have several rights regarding your personal data:
You can request a copy of the personal data we hold about you at any time.
You have the right to request correction of any inaccurate or incomplete personal data.
You can request deletion of your personal data, subject to our legal obligations.
You can request that we restrict how we process your data under certain circumstances.
You have the right to receive your personal data in a machine-readable format for portability purposes.
You can object to the processing of your data for specific purposes such as direct marketing.
To exercise any of the above rights, contact the boss98 privacy team via live chat within the platform or email our support team. We will process your request within 14 business days. For more complex cases, this period may be extended to 30 days with notice to you.
Boss98 is a platform restricted to individuals aged 18 and above only. We do not knowingly collect or process personal data of individuals under the age of 18.
If we determine that a child's personal data has been collected without valid parental or guardian consent, we will take immediate steps to delete that data and close the associated account.
If you believe your child or a minor has registered on boss98, please contact our support team immediately via the live chat within the platform.
The boss98 platform uses third-party services to process payments and provide games. While we carefully select these partners and ensure they meet high privacy standards, we are not responsible for their separate privacy policies or data handling practices.
Key third-party providers of boss98 that may process your data include:
All these providers are bound by data processing agreements that ensure your data is handled in accordance with the privacy standards set by boss98.
Boss98 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technology in use. The "Updated" date at the top of this page indicates when this Privacy Policy was last reviewed.
For significant changes, we will notify you via:
Continued use of the boss98 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.
If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, we encourage you to contact us directly.
You can reach the boss98 privacy team via:
We commit to acknowledging your enquiry within 24 hours and providing a full response within 14 working days.
This boss98 Privacy Policy takes effect on 1 January 2026 and supersedes all previous versions. The current version is version 2.5, reviewed and approved by the boss98 legal team.
Register with confidence — boss98 protects your privacy with bank-grade encryption, a no-data-selling policy, and full control in your hands.
256-bit SSL protected. Age 18 and above only.