This Privacy Policy describes how bossku2 collects, uses, stores, and protects the personal data of our Members and website visitors. Your privacy matters to us — please read this document carefully.
This Privacy Policy applies to all personal data collected by bossku2 through the bossku2.co website and associated platform services, including but not limited to account registration, deposits and withdrawals, gameplay, customer support interactions, and marketing communications.
By registering a bossku2 account or continuing to use the platform after the effective date of this Policy, you acknowledge that you have read and understood how bossku2 handles your personal data. This Policy should be read alongside the bossku2 Terms & Conditions, which govern the overall use of the platform.
bossku2 is committed to handling personal data in compliance with applicable data protection legislation, including the Malaysian Personal Data Protection Act 2010 (PDPA) and international gaming authority data governance requirements.
For the purposes of this Privacy Policy, the data controller responsible for your personal data is the operator of the bossku2 platform, operating under international gaming authority licensing standards. The data controller determines the purposes and means of processing personal data collected through bossku2.co.
All data protection enquiries, access requests, and complaints should be directed to the bossku2 data protection contact via the contact details in Section 13 of this Policy.
bossku2 collects personal data through several touchpoints on the platform. The categories of data collected are as follows:
When you create a bossku2 account, we collect: full legal name, Malaysian IC or passport number, date of birth, residential address (including city and postcode), email address, and Malaysian mobile phone number. This data is mandatory for account creation and is used for identity verification, KYC compliance, and account management.
When you make deposits or withdrawal requests, bossku2 records: transaction amounts, timestamps, payment method identifiers (e.g., e-wallet account reference, bank account suffix), and transaction status. Full payment credentials (e.g., complete bank account numbers) are not stored by bossku2; these are handled exclusively by the relevant payment processor.
bossku2 logs all gaming activity on the platform, including: games played, bet amounts and outcomes, session durations, and game round identifiers. This data is used for dispute resolution, regulatory reporting, responsible gaming monitoring, and platform improvement.
bossku2 automatically collects technical data when you access the platform, including: IP address, device type and operating system, browser type and version, referring URL, and session duration. This data is used for security monitoring, fraud detection, and platform performance analysis.
When you contact bossku2 support via live chat or email, we retain records of the interaction including your name, account identifier, the subject of the enquiry, and the full correspondence history. These records are retained to ensure service continuity and regulatory compliance.
If you opt in to marketing communications from bossku2, we record your preferences and track your interaction with emails and promotional messages (open rates, click-through rates) to improve the relevance of future communications. You may withdraw this consent at any time.
| Data Category | Examples | Purpose |
|---|---|---|
| Identity | Name, IC/Passport, DOB | KYC, age verification, account management |
| Contact | Email, phone, address | Account access, communications, OTP security |
| Financial | Transaction records, payment method ref. | Payment processing, AML compliance, withdrawals |
| Gameplay | Bet history, game sessions, outcomes | Dispute resolution, responsible gaming, regulatory audit |
| Technical | IP address, device, browser | Security, fraud prevention, platform analytics |
| Marketing | Email preferences, campaign interaction | Personalised promotions (opt-in only) |
bossku2 uses your personal data for the following purposes:
bossku2 processes your personal data under the following legal bases, consistent with the Malaysian Personal Data Protection Act 2010 and applicable international data protection standards:
bossku2 uses cookies and similar tracking technologies on the platform for the following purposes:
These cookies are strictly necessary for the platform to function. They maintain your login session, remember your language preferences, and support core security features including CSRF protection. These cookies cannot be disabled without rendering the platform inoperable.
bossku2 uses aggregated analytics to understand how Members use the platform — which pages are visited most frequently, where users encounter errors, and how navigation flows are performing. Analytics data is anonymised and never used to personally identify individual Members.
You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect platform functionality. Clearing cookies will end your active session and require you to log in again at your next visit.
bossku2 does not sell, rent, or trade your personal data to third parties for commercial purposes. Data may be shared with the following categories of third party solely to the extent necessary for the stated purpose:
All third-party service providers engaged by bossku2 are contractually bound to process personal data only for the stated purpose and to maintain appropriate security standards consistent with bossku2's data protection obligations.
bossku2 retains personal data only for as long as necessary for the purpose for which it was collected, or as required by applicable law. The following general retention principles apply:
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that renders re-identification impossible.
Under the Malaysian Personal Data Protection Act 2010 and applicable international standards, you have the following rights in respect of your personal data held by bossku2:
To exercise any of the above rights, please contact bossku2 via the details in Section 13. We will respond to all verifiable requests within thirty (30) calendar days. Note that certain rights may be limited where data retention is required by law or to protect the rights of third parties.
bossku2 implements a range of technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
While bossku2 takes all reasonable measures to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying bossku2 promptly if you suspect any unauthorised access to your account.
bossku2 strictly prohibits use of the platform by individuals under the age of 21. bossku2 does not knowingly collect or process personal data from individuals under 21 years of age. If bossku2 becomes aware that personal data has been collected from an individual who is under 21, that data will be deleted immediately and the associated account will be closed.
If you are a parent or guardian and believe that a minor has registered a bossku2 account, please contact us immediately at the details provided in Section 13 so that we can investigate and take appropriate action.
bossku2 reserves the right to update this Privacy Policy at any time. Material changes — defined as changes that significantly affect how bossku2 collects, uses, or shares personal data — will be communicated to Members via the registered email address at least fourteen (14) days prior to the changes taking effect. Minor updates (e.g., editorial corrections, clarifications) will be reflected by updating the "Last Updated" date at the top of this Policy.
Your continued use of the bossku2 platform following the effective date of any Privacy Policy update constitutes your acknowledgement of the updated Policy. If you do not agree with any material change, you may close your account in accordance with the Terms & Conditions.
For all data protection enquiries, access requests, or complaints relating to your personal data at bossku2, please contact us using the following details:
bossku2 does not sell, rent, or trade your personal data to marketing companies or data brokers. Your information exists solely to operate your account and comply with regulatory requirements.
All sensitive personal data at bossku2 is encrypted both in transit (TLS) and at rest. Role-based access controls ensure only authorised personnel can access account data, and only when necessary.
bossku2 processes Malaysian member data in accordance with the Personal Data Protection Act 2010 (PDPA). You have rights to access, correct, and restrict processing of your personal data.
bossku2 retains data only as long as required by regulatory obligation. Financial records are kept for seven years (AML compliance); account data for five years post-closure. All other data is deleted on schedule.
Data access, correction, and consent withdrawal requests are handled within 30 days. Update your marketing preferences directly in your account settings panel at any time — no barriers, no friction.
bossku2 applies data minimisation principles — we collect only what is genuinely necessary for account operation, payment processing, and regulatory compliance. No speculative data collection.
Your personal data is protected at every step. From registration in Kuala Lumpur to withdrawals via Touch 'n Go, bossku2 handles your information with the care it deserves. Log in and enjoy Malaysia's most trusted online casino and sportsbook.