Privacy Policy BossClub – Your Data Is Safe With Us

1 Introduction – bossclub's Commitment to Your Privacy

Welcome to the Privacy Policy page bossclub. We understand that privacy is a matter of great importance to every member, especially when it involves financial information and sensitive personal data. That is why bossclub's privacy policy is designed to give you a clear and honest picture of how we handle your data.

Bossclub operates as an online entertainment platform offering Sports Betting, Live Casino, slots, Virtual Sports, and a range of other entertainment products to users in Malaysia. In the course of providing these services, we collect and process certain personal data from our members. Every piece of data collected serves a specific and legitimate purpose, and we never collect data beyond what is necessary to deliver our services to you.

This bossclub privacy policy has been drafted in compliance with Personal Data Protection Act 2010 (PDPA) Malaysia, which is the primary legislation governing the collection and processing of personal data in this country. We take these legal and ethical obligations very seriously and are committed to handling your data in the most secure and responsible manner possible.

2 Personal Data We Collect

Bossclub collects your personal data through several methods depending on how you interact with our platform. The following are the categories of data we may collect:

All data listed above is collected only when necessary and relevant to the provision of bossclub's services. We do not collect sensitive data such as medical information, religious beliefs, or members' political views.

3 How We Use Your Personal Data

Every piece of personal data collected by bossclub has a clear and lawful purpose. We process your data only for the following purposes:

Bossclub will not use your personal data for any purpose other than those stated in the table above without first obtaining your consent. Should we intend to process your data for a new purpose, we will notify you and seek the appropriate consent in accordance with the provisions of PDPA 2010.

4 Data Disclosure to Third Parties

Bossclub does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. However, in the course of operating the platform, there are certain situations where we need to share member data with the following parties:

• Payment service providers: Approved payment gateways process your transactions, including Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and Malaysian local banks linked to FPX. They receive only the data required to process your transaction.
• Gaming software providers: Licensed, internationally accredited casino and sports content providers may receive the minimum technical data required to operate the games. They are bound by strict confidentiality agreements with bossclub.
• Technology infrastructure providers: Cloud computing services, security monitoring, and customer support systems we use may process your data as third-party data processors governed by strict data protection contracts.
• Legal authorities: bossclub will disclose members' personal data to Malaysian authorities — including the police, courts, or regulatory bodies — when required by law, court order, or in the course of financial crime investigations such as money laundering.

In all instances of data sharing described above, bossclub ensures that the receiving parties have adequate data protection measures in place and use the data solely for the specified purpose. All third-party service providers we engage are subject to thorough security and privacy assessments prior to appointment.

5 Data Security – How We Protect Your Information

Data security is bossclub's highest priority. We continually invest in the latest security infrastructure and practices to ensure your personal data is always protected against unauthorised access, breaches, or misuse.

The technical and operational security measures we have in place include:

• 256-bit SSL/TLS encryption: All communication between your browser and bossclub's servers is encrypted using industry-grade SSL/TLS protocols, ensuring no third party can intercept or read your data in transit.
• Stored data encryption: Sensitive member data such as passwords and financial information is stored in encrypted form using the latest encryption algorithms. Your password is never stored as plain text.
• Multi-layered access control: Only authorised bossclub staff with a legitimate business need may access members' personal data. All access is logged and continuously monitored.
• 24/7 security monitoring: Our intrusion detection system operates around the clock to detect and respond to security threats in real time.
• Regular penetration testing: bossclub conducts regular security audits and penetration testing by independent security experts to identify and patch any system vulnerabilities.
• Two-factor authentication (2FA): Members are encouraged to enable two-factor authentication on their accounts as an added layer of protection against unauthorised access.

6 Cookies & Tracking Technologies

Bossclub uses cookies and similar tracking technologies to enhance user experience, maintain session security, and understand how members interact with our platform. The following are the types of cookies we use:

• Essential Cookies (Required): These cookies are required for core platform functions such as login, session verification, and security. Without them, the bossclub platform cannot function properly. This type of cookie cannot be disabled.
• Performance & Analytics Cookies: We use internal analytics tools to understand how members interact with the platform — including the most frequently visited pages, time spent, and navigation paths. This information helps us continuously improve the overall user experience.
• Functional Cookies: These cookies save your preferences — such as your selected language and display settings — so you don't need to reconfigure them each time you log in to bossclub.
• Marketing Cookies (With Consent Only): bossclub uses marketing cookies only where you have given explicit consent. You may withdraw this consent at any time through the cookie settings on our platform.

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of the bossclub platform. For guidance on managing cookies in popular browsers, refer to your browser's help documentation.

7 Data Storage & Retention Period

Bossclub retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. The following are our data retention guidelines:

Upon expiry of the retention period, your personal data will be securely deleted or anonymised in a form that can no longer be identified. In certain cases, we may need to retain data for a longer period if there are outstanding legal claims or instructions from authorities.

8 Your Rights as a BossClub Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a bossclub member have the following rights regarding your personal data. bossclub is committed to facilitating the exercise of these rights:

To exercise any of the rights above, please contact the bossclub privacy team by email at support@bossclub.app stating the right you wish to exercise and the relevant details. We will respond within the timeframe prescribed by Malaysia's PDPA.

9 Cross-Border Data Transfers

In certain circumstances, bossclub members' personal data may be transferred to and processed outside Malaysia, particularly when bossclub utilises cloud infrastructure services or international-grade gaming software providers. All cross-border data transfers carried out by bossclub are subject to the following safeguards:

• The recipient country must offer a level of data protection equivalent to or greater than that of Malaysia.
• All data transfers are accompanied by a Data Processing Agreement that binds the recipient to the security and privacy standards set by bossclub.
• Bossclub conducts a Data Protection Impact Assessment (DPIA) before any new cross-border data transfer is carried out.

Bossclub does not transfer members' personal data to countries that lack an adequate data protection framework without first obtaining appropriate consent and implementing the necessary safeguards.

10 Children's Privacy – Protection of Minors

Bossclub is an entertainment platform that is intended for individuals aged 18 and above only. We do not knowingly collect or process personal data from any individual under the age of 18.

All prospective members are required to verify their age during registration. We also conduct KYC (Know Your Customer) checks to ensure all members meet the minimum age requirement. Should bossclub discover that personal data of an individual under the age of 18 has been inadvertently collected, we will promptly delete that data and close the relevant account.

11 Amendments to This Privacy Policy

Bossclub reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or developments in platform operations. When material amendments are made, we will:

• Publishing a clear notice on the bossclub platform homepage at least 14 days before the amendments take effect.
• Sending email notifications to all registered members with a verified email address.
• Updating the "Last Updated" date at the top of this privacy policy page.

Continued use of the bossclub platform after the effective date of any amendment constitutes your acceptance of the updated privacy policy terms. If you do not agree with the changes, you are entitled to close your account and request deletion of your personal data by contacting the bossclub support team.

12 Contact Us – Privacy Enquiries

If you have any questions, concerns, or complaints about how bossclub handles your personal data, or wish to exercise any of your privacy rights, please reach us through the following channels:

• Privacy Email: support@bossclub.app – please include "Privacy Enquiry" in your email subject line for faster handling.
• LiveChat: Available 24/7 in Bahasa Malaysia – for general privacy and data-related enquiries.

The bossclub privacy team will respond to all enquiries within 14 business days. For more complex cases involving data access or deletion requests, the full response period is 21 business days as stipulated by PDPA 2010.

If you are dissatisfied with bossclub's response to your privacy complaint, you have the right to submit a complaint to the Department of Personal Data Protection Malaysia (JPDP) which is the official regulatory body under the Malaysian Ministry of Communications and Digital.