Bosscuci Privacy Policy – Protecting Your Data

1 Introduction & Scope of bosscuci's Privacy Policy

Bosscuci understands that privacy is more than a legal requirement — it is a fundamental right that must be respected and protected. This Privacy Policy applies to all personal information you provide to bosscuci through any channel, including account registration, use of the gaming platform, financial transactions, communications with our customer support team, and any other interaction with the bosscuci platform.

This policy is part of bosscuci's broader commitment to transparency and trust. We believe every Malaysian player who entrusts their personal information to bosscuci deserves to know exactly how that information is used. That's why we've written this Privacy Policy in plain language that anyone can understand — not confusing legal jargon.

2 Personal Information Collected by bosscuci

Bosscuci only collects the personal information necessary to provide our services safely, efficiently, and responsibly. The types of information we collect are as follows:

Bosscuci collects this information through several methods: (1) Directly from you during account registration and platform use; (2) Automatically through technologies such as cookies and server logs while you use the bosscuci platform; (3) From payment service providers such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX, Maybank2u, and CIMB Clicks for the purpose of verifying financial transactions; (4) From authorised third parties for identity verification and anti-money laundering compliance purposes.

3 How bosscuci Uses Your Personal Information

Bosscuci uses the personal information collected for the following purposes, all of which are necessary to deliver our services safely and effectively:

• Account Management: Creating, verifying, and managing your bosscuci account, including processing registration, identity verification, and secure login.
• Transaction Processing: All deposits and fund withdrawals are processed securely via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX, Maybank2u, CIMB Clicks, and other payment methods supported by bosscuci.
• Service Delivery: Enables you to access and play all Live Casino games, table games, Sports Betting, and slots available on the bosscuci platform.
• Customer Support: Processing and responding to enquiries, complaints, and support requests submitted to the bosscuci customer support team.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and security breaches that could affect the bosscuci platform or other players.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate assistance to players who need it.
• Legal Compliance: Fulfilling bosscuci's legal obligations under the Malaysian PDPA 2010, anti-money laundering laws, and other applicable regulations.
• Service Improvement: Analysing usage data in aggregate (without individual identification) to better understand player needs and continuously improve the bosscuci platform.
• Marketing Communications: Sending you information about bosscuci promotions, bonuses, and special offers — subject to the communication preferences you have set in your account.

Bosscuci will not use your personal information for any purpose not stated in this Privacy Policy without first obtaining your consent.

4 Sharing of Personal Information

Bosscuci does not sell, rent, or trade your personal information to any third party for their marketing purposes. However, in the course of operating the bosscuci platform, we do share certain personal information with the following categories of third parties — strictly on a need-to-know basis and with appropriate safeguards in place:

5 Data Security at bosscuci

Bosscuci continuously invests in security infrastructure to ensure your personal and financial information is protected to the highest achievable standard. The security measures we have in place include:

• 256-bit SSL Encryption: All data transmitted between your browser and bosscuci's servers is encrypted using TLS 1.3 with AES-256 encryption keys — the same security standard used by leading banks in Malaysia.
• Database Security: All data stored in the bosscuci database is encrypted at rest. Passwords are stored using a one-way hashing algorithm that cannot be reversed.
• Layered Access Control: Access to bosscuci systems containing player data requires multi-factor authentication (MFA) and follows the principle of least privilege — only staff with a legitimate business need can access the relevant data.
• 24/7 Monitoring: The bosscuci information security team continuously monitors all platform activity to detect any intrusion attempts, suspicious behaviour, or security anomalies.
• Regular Penetration Testing: bosscuci conducts regular penetration testing by independent cybersecurity firms to identify and address vulnerabilities before they can be exploited.
• PCI DSS Compliance: bosscuci complies with the Payment Card Industry Data Security Standard (PCI DSS) to ensure all payment-related data is handled securely.

While bosscuci takes all reasonable steps to protect your data, no security system in the world can be guaranteed 100% safe from every threat. bosscuci is committed to promptly notifying affected players in the event of any material data security breach, in accordance with applicable legal requirements.

6 bosscuci Cookies & Tracking Technology

The bosscuci platform uses cookies and similar tracking technologies to enhance the user experience and platform security. Cookies are small text files stored on your device when you visit the bosscuci platform. bosscuci uses several types of cookies:

• Strictly Necessary Cookies: These cookies are essential for the bosscuci platform to function properly. They enable you to log in, navigate between games, and use core platform features. Disabling these cookies will affect platform functionality.
• Functional Cookies: These cookies store your preferences and settings — such as your preferred language, frequently played games, and session information — enabling a more personalised and seamless experience every time you use bosscuci.
• Analytics Cookies: bosscuci uses analytics data collected through cookies to understand how players use the platform — which pages are visited most, which games are most popular, and where players may be encountering issues. This data is used in aggregate form to improve the platform.
• Security Cookies: These cookies help bosscuci detect and prevent fraudulent activity, monitor suspicious login sessions, and protect your account from unauthorised access.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality and your overall experience on the bosscuci platform. For more information on managing cookies in your browser, please refer to your browser's documentation.

7 bosscuci Data Retention Period

Bosscuci retains your personal information for as long as necessary for the purposes outlined in this Privacy Policy, or as required under applicable Malaysian law. The following are general guidelines for our retention periods:

• Active Account Data: For the duration your bosscuci account remains active, and for a reasonable period after account closure to allow for the resolution of any outstanding claims.
• Financial Transaction Records: A minimum of 7 years in accordance with Malaysian accounting and anti-money laundering legal requirements — these records are required for audit and legal compliance purposes.
• Identity Verification Records: At least 5 years after account closure, in accordance with Know Your Customer (KYC) legal compliance requirements.
• Support Communication Data: 3 years from the date of last interaction, for the purpose of complaint resolution and bosscuci service quality improvement.
• Security Log Data: 12 months from the date of creation, to allow for security investigations if required.

When data is no longer required for a legitimate purpose and the minimum retention period has expired, bosscuci will securely delete or anonymise it using appropriate methods to prevent unauthorised recovery.

8 Your Rights as a bosscuci Player

Under the Malaysian Personal Data Protection Act (PDPA) 2010 and this bosscuci Privacy Policy, you have the following rights regarding your personal information:

• Right of Access: You have the right to request and receive a copy of the personal information bosscuci holds about you. Data access requests can be submitted by email to support@bosscuci.best with appropriate identity verification.
• Right to Rectification: If the personal information we hold about you is inaccurate or out of date, you have the right to request a correction. You can also update much of your profile information directly through your bosscuci account settings.
• Right to Restriction of Processing: Under certain circumstances, you may request that bosscuci restrict how we process your personal information — for example, while you are disputing the accuracy of that data pending verification.
• Right to Object to Marketing: You may object to the use of your personal information for direct marketing purposes at any time. You can unsubscribe from bosscuci marketing communications directly through your account settings or by contacting our support team.
• Right to Erasure: Under certain circumstances and subject to bosscuci's legal obligations, you may request the deletion of your personal information. Each request will be assessed on a case-by-case basis in accordance with applicable legal requirements.

To submit any request relating to your privacy rights, please contact the bosscuci data protection team by email at support@bosscuci.best with the subject line "Data Privacy Request". We will process your request within 30 business days and inform you of the action to be taken.

9 Children's Privacy

The bosscuci platform is intended exclusively for adult users aged 18 years and above. bosscuci does not knowingly collect or process any personal information from individuals under the age of 18.

If bosscuci discovers that personal information belonging to a minor under the age of 18 has been collected without proper age verification, we will take immediate steps to delete that information and close the account without delay.

If you are a parent or guardian who believes that a minor in your care has registered a bosscuci account without authorisation, please contact the bosscuci support team immediately by email at support@bosscuci.best so that the appropriate action can be taken.

10 Third-Party Links

The bosscuci platform may contain links to third-party websites or services in certain contexts. bosscuci is not responsible for the privacy practices or content of those third-party websites or services. Each third-party website operates under its own privacy policy, independent of bosscuci.

We recommend that you carefully read the privacy policy of every third-party website or service you access through the bosscuci platform before providing them with any personal information. Payment service providers such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX, Maybank2u, and CIMB Clicks each have their own privacy policies governing how they handle your data when you use their services to transact with bosscuci.

11 Amendments to the bosscuci Privacy Policy

Bosscuci reserves the right to amend, update, or supplement this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or technological developments. Any material changes to this Privacy Policy will be communicated to you through:

• An email notice sent to the registered email address of your bosscuci account at least 14 days before the amendment takes effect.
• A notice prominently displayed on the bosscuci platform homepage for a reasonable period before and after the amendment takes effect.
• Update the "Last Updated" date at the top of this document to reflect the latest version.

Continued use of the bosscuci platform after an amended Privacy Policy takes effect will be considered your acceptance of the revised Policy. If you do not agree with the changes, you have the right to close your bosscuci account before they come into effect.

12 Contact Us About Data Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or the way bosscuci handles your personal information, please reach out to us through the following channels:

• Email: support@bosscuci.best (subject: Data Privacy)
• Live Chat: Available directly on the bosscuci platform, 24 hours a day, 7 days a week
• WhatsApp: The bosscuci WhatsApp support number displayed in the platform's support section

The bosscuci data protection team will process your privacy enquiry within 5 business days and provide a comprehensive response. For data access or deletion requests, processing may take up to 30 business days depending on the complexity of the request.