Boss69 Privacy Policy – Personal Data Protection for Malaysian Players

Boss69 understands that your personal data is a trust placed in us — not merely technical information to be processed. When you register an account at Boss69, make a deposit using Touch 'n Go eWallet or GrabPay, or place a bet on a Malaysia Super League match, you are entrusting us with sensitive information. We take that responsibility seriously.

This Privacy Policy is prepared in compliance with the requirements of Malaysia Personal Data Protection Act 2010 (PDPA) and clearly outlines your rights as a data subject, how we protect your information, and the channels available for you to exercise those rights at any time.

If you have any questions about how Boss69 handles your personal data, or wish to exercise any of the rights outlined in this policy, please contact us at support@boss69.asia and we will respond within 3 business days.

Boss69 collects personal data necessary to provide platform services safely and effectively. The following are the categories of data we collect:

Boss69 does not collect data beyond what is necessary to operate the platform. We only request information that is genuinely relevant and proportionate to the stated purpose — this is our commitment to the data minimisation principle under PDPA.

Boss69 collects your personal data through various channels in the course of normal platform use. The ways in which data is collected are:

• Account registration form – Information you enter directly when registering a new Boss69 account.
• Identity verification (KYC) – Identity documents submitted during the identity verification process to meet anti-money laundering regulatory requirements.
• Payment transactions – Data generated when you make deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, and when withdrawing winnings.
• Platform interactions – Usage data automatically generated when you use the Boss69 platform — including pages you visit, matches you watch, and bets you place.
• Support communications – Information you share when contacting the boss69 support team via live chat, email, or WhatsApp.
• Cookies and Tracking Technologies – Technical data automatically collected via cookies and similar technologies when you browse the Boss69 platform (explained further in Section 9).

Boss69 uses collected personal data exclusively for legitimate purposes directly related to the platform's operations. The specific purposes are as follows:

• Account management – Creating, maintaining, and managing your Boss69 account, including the login process, password resets, and personal information updates.
• Transaction processing – Processing deposits via Malaysian e-wallets and FPX, crediting winnings, and managing withdrawals to your account.
• Identity verification and compliance – To fulfil Malaysian legal requirements including age verification (18 and above), KYC procedures, and anti-money laundering (AML) compliance obligations.
• Fraud prevention and security – Detecting, investigating, and preventing fraudulent activity, platform abuse, and security threats that could affect other players or the integrity of Boss69.
• Provision of support services – Assisting you when you contact the Boss69 support team regarding any technical, financial, or betting-related issues.
• Responsible gaming – Monitoring usage patterns to identify players who may need responsible gaming support and to meet the platform's obligations in this regard.
• Product improvement – Analysing aggregated usage data (without identifying individuals) to improve Boss69's platform features, performance, and overall user experience.
• Marketing communications – Sending promotional information, bonuses, and Boss69 product updates — only if you have given consent to receive them.

Boss69 does not use your personal data for any purposes not stated here without first obtaining your consent. Any new purpose will be communicated through an update to this Privacy Policy with appropriate notice.

Boss69 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. This is a non-negotiable policy. However, to enable Boss69 to operate effectively, your personal data may be shared with the following parties in limited circumstances:

• Payment service providers – Payment system operators such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and banks supporting FPX (Maybank, CIMB, and others) for transaction processing purposes only. These providers maintain their own privacy policies and are bound by confidentiality agreements with Boss69.
• Platform technology provider – Casino software and Sports Betting companies that provide games and technical infrastructure for the Boss69 platform — only the minimum data required for game operations is shared.
• Support service providers – Communication and customer support tools used by boss69, bound by strict data processing agreements.
• Legal authorities – Malaysian law enforcement agencies or regulatory bodies where boss69 is required to do so by law, court order, or valid regulatory requirement. In such cases, boss69 will disclose only the minimum data necessary.

Boss69 does not share your personal data with entities outside Malaysia unless an equivalent level of protection to Malaysia's PDPA can be ensured in the destination country. In all cases, appropriate safeguards will be put in place before any cross-border data transfer is carried out.

Boss69 continuously invests in security infrastructure to ensure your personal and financial data is protected to the highest industry standards. The security measures we have implemented include:

• 256-bit SSL Encryption – All data transmitted between your device and Boss69's servers is encrypted using the latest SSL/TLS protocols — whether during login, deposits, or any other interaction with the platform.
• Data storage encryption – Sensitive data such as financial information and identity verification documents stored on Boss69 servers is encrypted using AES-256 standards — unreadable even to unauthorised Boss69 staff.
• Two-factor authentication (2FA) – Boss69 offers two-factor authentication for account login, adding an extra layer of security beyond your password.
• Real-time fraud monitoring – Boss69's systems monitor account activity around the clock to detect suspicious patterns and alert our security team immediately.
• Internal access controls – Access to players' personal data within boss69 is restricted to staff who require it to perform their duties — a "least privilege access" principle is enforced across all internal systems.
• Regular security audits – Boss69's infrastructure and security practices are regularly audited by independent third parties to ensure compliance with the latest security standards.
• Incident response plan – Boss69 has tested incident response procedures in place to handle any security breach promptly and effectively, including notifying affected players where necessary.

Boss69 retains your personal data only for as long as it is needed for the purposes stated in this policy, or as required by Malaysian law. The general data retention guidelines are as follows:

• Active account data – Retained for the duration your account is active with Boss69 and for an additional 7 years after account closure to meet Malaysian financial and tax regulatory requirements.
• Financial transaction records – All records of deposits, withdrawals, and financial transactions are retained for a minimum of 7 years in line with Malaysia's financial legal requirements and AML obligations.
• KYC verification documents – Identity documents and verification records are retained for 7 years after the business relationship with Boss69 ends.
• Support communication logs – Customer support conversation records are retained for 2 years for quality control and dispute resolution purposes.
• Marketing data – If you withdraw your marketing consent, the relevant data will be deleted or anonymised within 30 days from the date of withdrawal.

When data is no longer needed and there is no legal requirement to retain it, Boss69 will delete or anonymise it in a secure and irreversible manner.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights in relation to your personal data held by Boss69. All requests to exercise these rights may be submitted by email to support@boss69.asia and will be processed within 21 working days:

• Right of Access – You have the right to request a copy of the personal data Boss69 holds about you, including details on how it is used and with whom it is shared.
• Right to Rectification – You have the right to request Boss69 to correct any personal data that is inaccurate, incomplete, or out of date. Some information can be updated directly through your account settings.
• Right to Restriction of Processing – Under certain circumstances, you have the right to request that boss69 restrict the processing of your data while an issue is being resolved.
• Right to Object – You have the right to object to the processing of your personal data for direct marketing purposes at any time — and Boss69 will stop immediately.
• Right to Erasure – You may request deletion of your personal data. However, boss69 may need to decline or defer such requests where there is a legal obligation to retain the data in question.
• Right to Withdraw Consent – Where data processing is based on your consent, you may withdraw that consent at any time without affecting the validity of processing carried out prior to the withdrawal.

The boss69 platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. The following are the types of cookies boss69 uses:

• Essential Cookies – Required for the core functions of the boss69 platform such as login, game sessions, and security. These cookies cannot be disabled as they are fundamental to the platform's operation.
• Functional Cookies – Remembering your preferences such as language settings, display themes, and favourite sports for a more personalised experience each time you return to Boss69.
• Analytics Cookies – Helps boss69 understand how players use the platform — the most visited pages, most-used features, and pain points — so we can continue to improve.
• Fraud Detection Cookies – Helps Boss69's security systems identify suspicious usage patterns and protect your account from unauthorised access.

You can manage your cookie preferences through your web browser settings. However, disabling essential cookies may affect the functionality of the Boss69 platform. Boss69 does not use cookies to serve you advertisements on websites outside our platform.

Boss69 is an adult entertainment platform restricted to users aged 18 years and above only. We strictly prohibit use of the platform by individuals under the age of 18 and do not knowingly collect personal data from minors.

If Boss69 discovers that personal data has been collected from a person under the age of 18, we will take the following steps immediately:

• Closing the account in question without prior notice.
• Securely deleting all personal data associated with the account.
• Reporting to the relevant authorities where deemed necessary.

If you have reason to believe that someone under the age of 18 has registered or is using the Boss69 platform, please notify us immediately at support@boss69.asia so that we can take the appropriate action promptly.

Boss69 reserves the right to review and update this Privacy Policy from time to time to reflect changes in our practices, the latest Malaysian legal requirements, or developments in relevant technology industries. Any material amendments will be communicated to you via:

• In-platform notifications on boss69 upon your next login after the changes take effect.
• Email the address registered to your Boss69 account.
• Update the "Latest version" date at the top of this document.

We encourage you to review this page periodically. Your continued use of the boss69 platform following any Privacy Policy amendments will be considered your acceptance of the updated policy. If you do not agree with the changes made, you have the right to close your boss69 account and request deletion of your data.

For any enquiries, concerns, or requests relating to this Privacy Policy or how Boss69 handles your personal data, please contact us through the following channels. We are committed to responding to all privacy enquiries within 3 business days:

• Privacy Email: support@boss69.asia (subject: "Data Privacy Enquiry")
• Live Chat: Available 24/7 within the Boss69 platform — request to speak with the privacy team
• WhatsApp: Via the support number available in your account

The boss69 team handling privacy enquiries consists of staff trained in Malaysia's PDPA requirements and personal data handling procedures. They are available to assist you in Bahasa Malaysia whenever you need them.

If you believe that Boss69 has not handled your personal data in accordance with this Privacy Policy or Malaysia's PDPA, you also have the right to lodge a complaint with Department of Personal Data Protection Malaysia which is the PDPA regulatory body in this country.