PDPA 2010 Compliance

Privacy Policy boss casino – Malaysia Player Data Protection

Boss casino takes your privacy seriously. This document clearly explains how we collect, store, use, and protect your personal information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: June 2026 256-bit SSL Encryption Bahasa Malaysia (ms-MY)
Note: This Privacy Policy is to be read together with Terms and Conditions boss casino. By using our platform, you agree to the collection and use of data as described herein.

1 Introduction and Scope of This Policy

Boss casino ("we", "Platform") respects the privacy of every user and player who uses our services. This Privacy Policy outlines our practices regarding the collection, processing, storage, and protection of your personal data when you visit or use the boss casino website and services.

This Policy applies to all individuals who register as a boss casino member, who visit our website without registering, who interact with our customer support, and who receive marketing communications from us.

We process your personal data in accordance with the Malaysia Personal Data Protection Act 2010 (PDPA). As a responsible data controller, we only collect data that is strictly necessary, store it securely, and never sell it to third parties.

2 Types of Personal Data We Collect

Boss casino collects several categories of personal data depending on how you interact with our platform. Below is an overview of the data we may collect:

👤
Identity Data

Full name, date of birth, MyKad number, gender, and nationality — required for account registration and the KYC process.

📬
Contact Data

Email address, mobile number, and current residential address for communication and verification purposes.

💳
Financial Data

Bank account number, e-wallet details (DuitNow, TnG, GrabPay), and deposit and withdrawal transaction history.

🎮
Gaming Activity Data

Betting records, game history, wins and losses, and playing habits for compliance and support purposes.

📱
Technical Data

IP address, browser type, operating system, device used, and access log data for security and analytics purposes.

📄
Verification Documents

MyKad copies, bank statements, and proof of address submitted during the identity verification (KYC) process.

boss casino only collects data necessary for legitimate purposes. We do not collect sensitive information such as biometric data, political views, or medical information unless required by law.

3 How We Use Your Personal Data

The personal data we collect is used for the following purposes, which are lawful under applicable law:

  • Account management: Creating, maintaining, and managing your player account, including a secure login process.
  • Transaction processing: Processing deposits, withdrawals, and all other financial transactions quickly and accurately.
  • Identity verification (KYC): Ensuring compliance with anti-money laundering (AML) legal requirements and verifying player age.
  • Fraud prevention: Detecting and investigating suspicious activity, multi-account usage, or attempts to manipulate the system.
  • Customer support: Providing effective support when you contact the boss casino support team.
  • Service improvement: Analysing usage patterns to improve the platform experience and introduce new features.
  • Marketing communications: Sending information about promotions, bonuses, and the latest offers — only if you have consented to receive them.
  • Legal compliance: Fulfilling our obligations under applicable laws, including PDPA 2010 and financial regulations.

4 Legal Basis for Data Processing

Boss casino processes your personal data on valid legal grounds in accordance with Malaysia's PDPA 2010:

  • Consent: You provide explicit consent when registering an account and agreeing to this Privacy Policy.
  • Contract performance: Processing necessary to fulfil the service agreement between you and boss casino — including payment processing and account management.
  • Legitimate interests: Processing to prevent fraud, ensure platform security, and improve the overall user experience.
  • Legal obligations: Processing required under Malaysian law, primarily relating to AML compliance and KYC requirements.

You have the right to withdraw your consent at any time for consent-based processing only, without affecting the lawfulness of processing carried out prior to that withdrawal.

5 Disclosure of Data to Third Parties

Boss casino does not sell, rent, or trade your personal data to any third party for marketing purposes. However, we may share data with the following parties under limited and controlled circumstances:

  • Payment service providers: PCI-DSS certified payment gateways that process your financial transactions — only the minimum data required to complete each transaction is shared.
  • Licensed game providers: Gaming platforms such as Pragmatic Play, Evolution, and others receive only the minimum technical data required to operate the games.
  • Identity verification services: Third-party providers that assist with the KYC verification process in a secure and trusted manner.
  • Law enforcement agencies: When required by law, court order, or a valid request from the relevant authorities.
  • Analytics service providers: For platform improvement purposes — data used is in aggregated form and cannot be individually identified.
All third parties with whom we share data are bound by strict data protection agreements and are only permitted to use that data for the specific purposes agreed upon. boss casino is responsible for ensuring these third parties maintain equivalent data protection standards.

6 Data Retention and Security Measures

Boss casino implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or unlawful disclosure.

  • Data encryption: All stored and transmitted data is protected by 256-bit SSL encryption — the same standard used by international banking institutions.
  • Access controls: Only authorised staff have access to players' personal data, and all access is logged for audit purposes.
  • Continuous monitoring: Our security systems are actively monitored 24/7 to detect and respond to any security threats.
  • Regular security testing: Penetration testing and security audits are conducted periodically by independent parties.
  • Incident response procedure: We have clear procedures in place to respond to any data breach, including notifying affected users within the required timeframe.

Data retention period: boss casino retains your personal data for as long as your account is active. After account closure, we retain data required for legal compliance for the period stipulated under applicable Malaysian law — typically 7 years for financial records. Data that is no longer needed will be securely deleted.

7 Cookies and Tracking Technologies

The boss casino website uses cookies and similar tracking technologies to enhance your browsing experience and ensure the platform functions properly.

Types of cookies we use:

  • Essential cookies: Required for core website functions such as login sessions and security. These cookies cannot be disabled as they are essential for the platform to operate.
  • Performance cookies: Collecting data on how visitors use our website to help us understand usage patterns and improve the platform.
  • Functionality cookies: Storing your preferences such as language and display settings to deliver a more personalised experience.
  • Analytics cookies: Helping us understand how players interact with the platform using aggregated, non-individually identifiable data.

You can manage or disable cookies through your browser settings. However, disabling certain cookies may affect the functionality of the boss casino platform. Continued use of our website is considered consent to the use of essential cookies.

8 Your Rights Under PDPA 2010

As a boss casino player, you have certain rights regarding your personal data under Malaysia's Personal Data Protection Act 2010:

Your Rights Description Available
Right of Access Requesting a copy of the personal data we hold about you in a readable format.
Right to Rectification Requesting correction of inaccurate or incomplete data via account settings or support.
Right to Erasure Requesting deletion of your data under certain circumstances, subject to our legal obligations.
Right to Object Objecting to the processing of your data for direct marketing purposes at any time.
Right to Portability Receiving your data in a structured, machine-readable format for transfer to another service.
Right to Restriction Requesting restriction of your data processing under certain circumstances while a dispute is being resolved.

To exercise any of the above rights, contact our data protection team via live chat or email. We will respond to your request within 30 business days. For complex cases, we may require additional time and will notify you accordingly.

9 Cross-Border Data Transfers

In certain situations, your personal data may be transferred to and stored on servers located outside Malaysia. This occurs primarily when we use the services of international cloud providers or game providers based in other countries.

When such transfers occur, boss casino ensures that:

  • The recipient country has an adequate or equivalent level of data protection to Malaysia's PDPA.
  • A legally binding data transfer agreement has been established with the data recipient.
  • Additional protective measures are implemented as needed to keep your data secure.
All cross-border data transfers carried out by boss casino comply with the provisions of PDPA 2010 and the guidelines issued by the Malaysian Personal Data Protection Commissioner.

10 Child Protection

Boss casino is deeply committed to child protection. Our platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18.

If we become aware that personal data of an underage individual has been inadvertently collected, we will take immediate steps to delete that data and close the associated account without any conditions.

Parents or guardians who believe their child has registered at boss casino should contact our support team immediately so that action can be taken as quickly as possible.

11 Amendments to This Privacy Policy

Boss casino reserves the right to update or modify this Privacy Policy at any time. Significant changes will be communicated to you via your registered email or in-platform notification at least 14 days before taking effect, except in urgent circumstances such as pressing legal compliance requirements.

The "Last Updated" date at the top of this page will always reflect the latest version of this policy. We encourage you to review this page periodically to ensure you stay up to date with our latest privacy practices.

Your continued use of the boss casino platform after any changes take effect constitutes your acceptance of the updated Privacy Policy.

12 Contact Us for Privacy Enquiries

If you have any questions, concerns, or wish to exercise your privacy rights, please contact the boss casino Data Protection Officer through the following channels:

Live Chat:
Available 24/7 via the live chat button at the bottom right corner of the platform. Response time is typically under 3 minutes.
Privacy Email:
[email protected] — for enquiries specifically related to your data and privacy rights.

We are committed to responding to all privacy-related enquiries within 5 business days. For requests involving data access, correction, or deletion, the response period may take up to 30 days depending on the complexity of the request.

If you are not satisfied with how we handle your privacy request, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

Why You Can Trust boss casino with Your Data

Privacy protection is not merely a legal obligation for us — it is part of the core values of boss casino.

🔐
High-Grade Encryption

All data transmitted between your device and the boss casino servers is protected by 256-bit SSL encryption — the same standard used by banks. Sensitive information is stored in fully encrypted format.

📋
Malaysia PDPA Compliance

Boss casino operates in full compliance with Malaysia's Personal Data Protection Act 2010. We conduct regular compliance reviews and continuously update our practices in line with legislative changes.

🚫
Not Sold to Third Parties

This is our absolute commitment: your personal data has never been and will never be sold, rented, or traded to any third party for marketing or any other commercial purpose.

🛡️
Strict Access Controls

Only staff who genuinely require access to your data to perform their duties are permitted to do so. All access is logged and audited regularly to detect any improper use.

⚡
Rapid Incident Response

Boss casino has a comprehensive incident response procedure. In the event of a data breach, we will notify affected players within the stipulated timeframe and take immediate remedial action.

✅
Full Control in Your Hands

You have full control over your data. From your account settings, you can update your information, manage communication preferences, and request data access or deletion at any time.

Your Data is Safe, Your Game is Secure

Play at boss casino with complete confidence — your privacy and data security are our top priority. Register now and enjoy a safe, trusted online casino experience for Malaysian players.

Bahasa Melayu