Data Protection

Privacy Policy boss97 – Malaysian Member Personal Data Protection

At boss97, your privacy is not merely a legal obligation – it is a genuine commitment. This document transparently explains how we collect, use, and protect your personal information.

Updated: 1 January 2026
256-bit SSL
Data Not Sold
Member Rights Guaranteed
Secure Servers
Our Privacy Commitment

Six Data Protection Principles of boss97

Before reading the full policy, here are the six core principles that underpin how boss97 handles your personal data.

🔒

End-to-End Encryption

All data transmitted between your device and boss97 servers is protected with 256-bit SSL encryption – the highest industry standard used by Malaysia's leading banks.

🎯

Purpose-Driven Data Collection

Boss97 only collects data that is strictly necessary for the stated purposes. We do not collect information that is irrelevant or exceeds the operational requirements of the platform.

🚫

Data Not Sold to Third Parties

Boss97 does not sell, rent, or commercialise members' personal data to any third party. Your data belongs to you – it is not a business asset for us to trade.

👁️

Full Transparency

We clearly explain what data is collected, why it's needed, who can access it, and how long it's retained. No hidden practices or confusing language.

⚙️

Controls in Your Hands

Boss97 members have full control over their data – including the right to access, correct, delete, or transfer personal data at any time through your account.

🛡️

Malaysia PDPA Compliance

Boss97 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). All our data handling processes have been reviewed to ensure full adherence to local legislation.

1 Information We Collect

Boss97 collects several categories of personal information necessary to provide a safe, seamless, and responsible service to our members. All data collection is carried out lawfully on the basis of contractual necessity, legal obligation, or the platform's legitimate interests.

Data Category Examples of Information Purpose of Collection
Personal Identity Full name, date of birth, identification card number KYC Verification & Age Restriction
Contact Information Email address, phone number, residential address Account Communication & Support
Financial Data Bank name, account number, transaction records Deposit & Withdrawal Processing
Technical Data IP address, device type, browser, OS Security & Fraud Detection
Gaming Data Wagering records, game history, account activity Audit, compliance & responsible gaming
Behavioural Data Pages visited, session duration, clicks & navigation Platform & UX Improvement

We never collect sensitive information such as biometric data, health information, or your political views. If you voluntarily provide any information beyond what is required, it will be handled with the same level of protection.

2 How We Use Your Data

Data collected by boss97 is used exclusively for the purposes stated below. We do not use your data for any unrelated purpose without obtaining your consent first.

  • Identity and age eligibility verification during registration, along with ongoing KYC checks.
  • Secure processing of deposits, withdrawals, and financial transaction management.
  • Detection and prevention of fraud, money laundering, and suspicious account activity.
  • Providing responsive and effective customer support.
  • Compliance with legal obligations and reporting to the relevant authorities when required.
  • Sender of account-related communications such as transaction confirmations, security notices, and policy updates.
  • Personalizing your platform experience based on your preferences and usage patterns.
  • Aggregated analysis for the overall improvement of boss97 products and services.

If you have given consent to receive marketing communications, we may send you information about promotions, bonuses, and new games. You may withdraw this consent at any time through your account settings.

3 Data Sharing with Third Parties

Boss97 does not sell, rent, or share members' personal data with third parties for marketing or commercial purposes. However, there are specific situations where data must be shared to enable the platform to function properly:

  • Payment providers: Minimal financial data is shared with licensed payment providers such as FPX, Touch 'n Go, and bank processors to complete your transactions.
  • Game providers: Third-party game providers receive only the session data needed to run the games — this is the minimum technical data required, not your personal identity information.
  • Identity verification services: Licensed KYC services that help verify member identities during registration and periodic audits.
  • Legal authorities: boss97 will disclose required data when mandated by court order, legal obligation, or a legitimate request from the relevant authorities.

All third parties we work with are required to comply with data protection standards equal to or exceeding those of boss97 itself. Every data-sharing arrangement is subject to a binding data protection agreement.

4 Data Security & Protection

Boss97 continuously invests in security infrastructure to ensure your data remains protected at all times. Our technical and organisational security measures include:

  • 256-bit SSL encryption for all data transmitted between you and the boss97 platform.
  • Database-level data encryption using AES-256 algorithm for stored sensitive data.
  • Role-based access control (RBAC) ensures that only authorized personnel can access member data.
  • Real-time security monitoring with an AI-enhanced anomaly detection system.
  • Independent security audits conducted by third-party experts on a quarterly basis.
  • A responsible vulnerability disclosure program allowing security researchers to report issues they discover.
  • Encrypted secure data backups stored at separate locations for recovery in the event of an incident.

While we take every reasonable step to protect your data, no security system can be guaranteed 100% safe. In the event of a data breach involving your information, boss97 will notify you within 72 hours of becoming aware of it.

5 Cookies & Tracking Technologies

Boss97 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website.

  • Essential Cookies: Required for core platform functions such as Login, session verification, and security. These cookies cannot be disabled.
  • Functional Cookies: Saves your preferences such as language, interface settings, and game preferences for a more personalized experience.
  • Analytics Cookies: Helps us understand how members use the platform so we can make meaningful improvements.
  • Security Cookies: Used to detect suspicious activity and protect your account from unauthorised access.

You can manage cookie settings through your browser. However, disabling essential cookies may affect the functionality of the boss97 platform. For more information on managing cookies, refer to your browser's help documentation.

6 Data Retention Period

Boss97 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal requirements. General retention periods are as follows:

  • Active account data: Retained for the duration of the active account plus 7 years after closure for legal compliance purposes.
  • Financial transaction records: Retained for 7 years in accordance with Malaysia financial regulatory requirements.
  • Security logs: Retained for 2 years for investigation purposes if required.
  • Support communication data: Retained for 3 years for reference and service quality audits.
  • Anonymised analytics data: May be retained for a longer period as it contains no personally identifiable information.

Once the retention period expires, your data will be securely deleted or anonymized so it can no longer be linked to you. The deletion process uses methods that ensure data cannot be recovered.

7 Your Rights as a boss97 Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and boss97 policy, you have the following rights regarding your personal data:

Right of Access

You may request a copy of all personal data we hold about you at any time.

Right to Rectification

You may request that we correct any inaccurate or incomplete data.

Right to Erasure

In certain circumstances, you may request that we delete your personal data.

Right to Portability

You may request your data in a structured format for transfer to another platform.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

Right to Restrict Processing

You may request that we restrict how we process your data in certain situations.

To exercise any of the rights above, contact the boss97 support team via live chat or email. We will process your request within 30 business days.

8 Child Protection

The boss97 platform is not intended for individuals under 18 years of age, and we do not knowingly collect personal data from children. Our age verification system is designed to identify and block registrations from underage individuals.

If we become aware that a child's personal data has been collected without valid parental consent verification, we will immediately delete that data and close the account in question. If you believe a child's account exists on our platform, please contact us immediately.

9 Links to Other Websites

The boss97 platform may contain links to game provider websites or other third-party services. This Privacy Policy applies only to the boss97 platform itself. boss97 is not responsible for the privacy practices or content of those third-party websites.

We encourage you to read the privacy policy of every website you visit outside the boss97 platform before providing any personal information.

10 Amendments to the Privacy Policy

Boss97 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any material amendments will be communicated to members via in-platform notice or email at least 14 days before taking effect.

Continued use of the boss97 platform after any amendments take effect constitutes acceptance of the updated policy. If you disagree with the changes made, you may close your account and we will process your remaining balance withdrawal in accordance with standard procedures.

11 Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how boss97 handles your data, please contact us through the following channels:

  • Live Chat: Available 24/7 on the boss97 platform – the fastest channel for a response within minutes.
  • Privacy Email: [email protected] – for complaints or written requests that require documentation.
  • FAQ: Visit page FAQ us for answers to frequently asked questions about privacy and account security.

For more information about your rights under Malaysian law or other relevant policies, please refer to the Terms and Conditions boss97.

Your Data Is Safe with boss97

Join over 500,000 Malaysian players who already trust boss97 with their data security. Register today and enjoy a safe, seamless, and responsible gaming experience.

Bahasa Melayu