Updated: January 2026

Boss96 Privacy Policy — Personal Data Protection for Malaysia Players

Boss96 takes your privacy seriously. This document clearly explains what data we collect, how we use it, who can access it, and what rights you have as a player. No confusing legal language — written in plain terms you can understand.

Effective: 1 January 2026 Bahasa Malaysia (ms-MY)
256-bit SSL Encryption No sale of data to third parties Full data access rights for players
256-bit
SSL Encryption
0
Sale of Data to Third Parties
30 Days
Data Request Response Timeframe
24/7
Privacy Support Available

Boss96's Privacy Commitment to Malaysian Players

Six key pillars that demonstrate our dedication to protecting your data

Bank-Grade Encryption

All data transmitted between your device and boss96's servers is protected by 256-bit SSL encryption — the same security technology used by Maybank, CIMB, and Malaysia's major banks. This means your login credentials, payment details via Touch 'n Go, GrabPay or FPX, and all your transactions cannot be intercepted by any third party.

SSL 256-bit TLS 1.3 Independently Audited
Your Data, Your Control

Every Boss96 player has the full right to access their personal data, request corrections to inaccurate information, or apply for data deletion under certain circumstances. You may request a complete copy of all data Boss96 holds about you at any time through our customer support — at no additional cost.

Right of Access Right to Erasure Right to Transfer
No Data Sales

Boss96 has never and will never sell, lease, or transfer your personal data to any third party for advertising or marketing purposes without your explicit consent. Your data belongs to you — we use it only to operate your account and enhance your experience on the Boss96 platform.

No Data Sales No Third-Party Advertising
Secure Data Storage

All personal and financial data of boss96 players is stored on servers protected by multi-layered access controls, 24/7 monitoring, and regular backups. Our servers operate on independently audited cybersecurity infrastructure to ensure the highest level of protection against any intrusion attempts or data breaches.

Multi-Layer Security Regular Backups 24/7 Monitoring
Gaming Activity Confidentiality

Your betting records — whether on Malaysia Super League football, slots, live casino, or Virtual Sports — are completely confidential. boss96 does not disclose individual gaming activity history to any third party. Only you and authorised boss96 support staff can access your account records.

Confidential Records Restricted Access Audit Logs
Marketing Communications Controls

You may opt in or out of marketing communications from Boss96 at any time through your account settings. Every promotional email or SMS we send includes a straightforward unsubscribe option. Opting out of marketing will not affect any of the core Boss96 services you use.

Opt-In / Opt-Out Easy to Stop Full Control

A Quick Summary for You: boss96 collects the personal data necessary to operate your account and services. We do not sell your data to anyone. You may request access to, correction of, or deletion of your data at any time. By registering a boss96 account, you agree to this Privacy Policy. For any enquiries, contact us via 24/7 live chat or email support@boss96.click.

1Introduction and Scope of the Privacy Policy

This Privacy Policy ("Policy") describes how Boss96 — accessible via boss96.click and the Boss96 mobile app — collects, uses, stores, protects, and discloses your personal data. This Policy applies to all users of the Boss96 platform, including website visitors, registered players, and players using the mobile app.

Boss96 is committed to protecting the privacy of every Malaysian player who entrusts us with their personal information. We understand that in the context of an online betting platform, trust is the foundation of everything. That's why we handle your data with the same level of care and responsibility we apply to your financial transactions — with complete transparency, uncompromising security, and full respect for your right to privacy.

This Privacy Policy should be read together with Boss96's Terms and Conditions and Boss96's Responsible Gaming Policy. By using the Boss96 platform, you confirm that you have read and understood this Policy. If you do not agree with any provision of this Policy, please discontinue use of the Boss96 platform and contact us for further discussion.

2Types of Personal Data Collected

Boss96 only collects personal data that is genuinely necessary to operate our services safely and efficiently. We do not collect excessive or irrelevant data. Below are the categories of data we collect and the purposes for which they are used:

Data Categories Data Examples Purpose of Collection
Identity Data Full name, date of birth, IC number Identity verification & legal compliance
Contact Data Malaysian phone number, email address Account verification, service communications
Financial Data Payment methods, deposit & withdrawal records Transaction processing, fraud prevention
Activity Data Betting history, games played Account management, responsible gaming
Technical Data IP address, device type, web browser Account security, platform optimisation
Usage Data Pages visited, session duration, clicks User experience improvement

Financial data relating to payment methods such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX is not stored directly on Boss96 servers — it is processed through payment gateways that comply with PCI DSS (Payment Card Industry Data Security Standard). Boss96 only retains the transaction records required for your account, not your sensitive card or payment account details.

We may also collect additional information you voluntarily provide when contacting Boss96 customer support, submitting a complaint or feedback form, or going through identity verification processes required from time to time.

3How Boss96 Uses Your Personal Data

The personal data boss96 collects from you is used only for legitimate and transparent purposes. We use your data to:

  • Operating and maintaining your boss96 account — including processing deposits via Malaysia eWallets, withdrawals, and all financial transactions
  • Verifying your identity during registration and throughout any verification process required by financial compliance regulations
  • Providing efficient and effective customer support in Bahasa Malaysia via live chat and email
  • Detecting and preventing fraud, multiple account use, money laundering, and other unlawful activities
  • Complying with legal and regulatory obligations applicable to the operation of an online betting platform
  • Sending necessary service-related communications — including verification notices, security alerts and important updates
  • Monitoring gaming activity for responsible gambling purposes — including identifying patterns that may indicate a need for assistance
  • Improving the user experience on the Boss96 platform based on aggregated, anonymised usage patterns
  • Sending marketing communications related to Boss96 promotions — only to players who have given their consent, and this can be stopped at any time

Boss96 Data Minimisation Principles: We only use your data for the specific purposes stated. For example, your Malaysia Super League football betting history will not be used for any purpose other than account management, responsible gaming, and aggregated statistical reporting that does not identify you individually. We do not make automated decisions that significantly affect you based solely on data profiling without human review.

4Data Sharing and Disclosure

Boss96 does not sell, lease, or trade your personal data to any third party for advertising, marketing, or commercial gain. This is our absolute commitment to all Malaysian players. That said, there are limited situations where Boss96 may need to share your data with certain parties:

Trusted Service Providers: boss96 works with carefully selected third-party service providers to help operate the platform — including payment processors for Malaysia eWallets and FPX, cloud service providers, and gaming software providers. All these providers are bound by strict data protection agreements and are only permitted to use your data for the specific purposes required to deliver the services they provide to boss96.

Legal Requirements: boss96 may be required to disclose your personal data where mandated by Malaysian law, a court order, or a request from a legitimate authority. In such situations, boss96 will only disclose data that is strictly necessary within the scope of the relevant legal request.

Fraud Prevention & Security: For the purposes of financial fraud prevention and platform security, boss96 may share limited information with companies within the same group or approved identity verification partners. Such sharing is subject to strict confidentiality agreements.

Business Transfers: In the event of an extraordinary circumstance such as a merger, acquisition, or sale of Boss96 assets, players' personal data may be transferred to the new entity. In such situations, we will notify all affected players and ensure the new entity is bound by a Privacy Policy that provides at least the same level of protection as Boss96 currently offers.

What We Do Not Do: boss96 will never sell your personal data to advertisers, third-party marketing firms, data brokers, or any commercial entity for targeted advertising purposes. No one can purchase access to your information from boss96.

5boss96 Data Security Measures

The security of your personal data is boss96's highest technical and operational priority. We continuously invest in security infrastructure to ensure your data is always protected against unauthorised access, breaches, loss, or damage. The key security measures we employ are:

  • 256-bit SSL/TLS encryption for all data transmission between your device and boss96's servers
  • Encryption of data at rest for all sensitive information stored in our databases
  • Two-factor authentication (2FA) is available to all Boss96 players as an added layer of protection
  • Role-based access control ensures that only specifically authorised Boss96 staff can access player data
  • Round-the-clock 24/7 system security monitoring to detect and respond to any suspicious threats
  • Regular penetration testing by independent cybersecurity experts to identify and address any vulnerabilities
  • Tested incident response procedures to ensure a swift and effective response in the event of any security incident

While Boss96 takes all reasonable measures to protect your data, no security system in the world can be guaranteed 100% safe. That's why we also encourage you to take an active role in securing your own account — use a strong and unique password, enable 2FA, and never share your Boss96 login details with anyone, including family members.

6Cookies, Tracking Technologies & Analytics

Boss96 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser when you visit the boss96 website. They allow us to recognise you on subsequent visits and personalise your experience.

Boss96 uses several types of cookies:

  • Essential Cookies: Required for core platform functions — session login, account security, and language preferences. These cookies cannot be disabled as they are necessary for Boss96 services to function properly.
  • Performance Cookies: Collecting information on how visitors use the boss96 platform — including the most frequently visited pages, time spent, and navigation paths. This data is aggregated and anonymised to help us improve the platform.
  • Functional Cookies: Storing your preferences such as language, display theme, and other personal settings so you don't have to reconfigure them each time you use Boss96.
  • Marketing Cookies: Used only with your consent to display relevant Boss96 content and promotions. You may withdraw this consent at any time.

You can manage your cookie settings through your web browser's settings. Please note that disabling essential cookies may significantly affect the functionality of the Boss96 platform. For guidance on managing cookies in popular browsers such as Chrome, Firefox, Safari, and Edge, please refer to the respective browser's help documentation.

7Data Retention Period

Boss96 retains your personal data only for as long as necessary to fulfil the purposes set out in this Policy, or as required by Malaysian law. Once data is no longer needed, it will be securely deleted or anonymised. General guidelines for retention periods are as follows:

Data Type Retention Period Reason
Active account data Throughout active account Service operations
Financial transaction records 7 years Financial legal obligations
Security & access logs 2 years Security audits & investigations
Betting history 5 years Compliance & responsible gaming
Support communication data 3 years Referrals & service improvements
Marketing data (with consent) Until consent is withdrawn Relevant marketing communications

After your Boss96 account is closed at your own request, your identity and core personal data will be deleted or anonymised within 90 days, subject to the mandatory retention requirements above. Data that must be retained for a legally prescribed period will remain in a secure system with strictly limited access until the mandatory retention period expires.

8Your Rights as a Boss96 Player

Boss96 respects and upholds your rights regarding your personal data. As a Boss96 player, you have the following rights, which you may exercise at any time:

Right of Access

You may request a full copy of all personal data Boss96 holds about you. Requests will be processed within 30 business days at no charge.

Right to Rectification

If your personal data on Boss96's records is inaccurate or incomplete, you have the right to request an immediate correction. Please contact customer support with the relevant supporting documentation.

Right to Erasure

In certain circumstances, you may request the deletion of your personal data — subject to legal obligations that require us to retain certain records for a prescribed period.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time. This objection will be actioned immediately without affecting your core services.

Right to Restriction

You may request that Boss96 restrict the processing of your data in certain circumstances — for example, while you are disputing the accuracy of your data or objecting to unlawful processing.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format, and where technically feasible, to request that we transfer it directly to another platform.

To exercise any of the rights above, contact the boss96 privacy team via 24/7 live chat on the platform or email support@boss96.click with the subject line "Privacy Rights Request". Please specify the right you wish to exercise and provide sufficient information for us to verify your identity before processing the request. All requests will be acknowledged within 3 working days and resolved within 30 working days.

9Child Data Protection

The Boss96 platform is strictly for individuals aged 18 and above. Boss96 does not knowingly collect personal data from anyone under the age of 18. Should we discover that data belonging to an individual under 18 has been collected inadvertently, we will delete it immediately and close the account in question.

If you are a parent or guardian who believes that a child or dependent under the age of 18 has registered a boss96 account or provided us with their personal data, please contact the boss96 support team immediately at support@boss96.click. We will take prompt action to delete the relevant data and close the account without any conditions.

To Parents & Guardians: boss96 takes child protection very seriously. We encourage the use of parental control software on shared devices to prevent children from accessing the betting platform. If you suspect a minor is using any online betting platform, please take immediate action and report it to the relevant authorities.

10Cross-Border Data Transfers

Boss96 operates primarily for Malaysian players and prioritises storing data within infrastructure located in the Asian region. In managing the global operations required to deliver high-quality betting services — such as using game platforms from international providers — some data may be processed or stored outside Malaysia.

In all circumstances where Boss96 player personal data is transferred outside Malaysia, Boss96 ensures that adequate and equivalent protections are in place through the following mechanisms: standard data transfer agreements incorporating strict data protection clauses, verification that data recipients comply with recognised international data protection standards, and ongoing monitoring of the data protection practices of all service partners who receive Boss96 player data.

You may contact Boss96 for more information on the safeguards in place for any cross-border data transfers relating to your account.

11Third-Party Links & Services

The Boss96 platform may contain links to or integrations with third-party services required for platform functionality — such as payment gateways for processing Touch 'n Go eWallet, GrabPay, DuitNow, and FPX transactions, or game provider platforms for Live Casino and slots.

The boss96 Privacy Policy applies only to the boss96 platform itself. When you interact with third-party services — whether through payment gateways or gaming platforms provided by other vendors — their own privacy policies govern the data they collect. boss96 is not responsible for the privacy practices or content of any third-party services.

Boss96 carefully vets and selects all third-party partners based on their security credentials and privacy compliance. We ensure that every service provider we work with has robust privacy policies and adheres to relevant industry standards before entering into any partnership.

12Amendments to the Privacy Policy

Boss96 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, technological requirements, or new legal obligations. Any material amendments to this Policy will be communicated to registered players via an in-platform notice on Boss96 and an SMS to the registered phone number at least 14 days before the amendment takes effect.

The "Updated" date at the top of this page always reflects the latest version of the Boss96 Privacy Policy. We encourage you to review this Policy periodically to stay informed about how we protect your data. Continued use of the Boss96 platform after any amendment takes effect will be considered acceptance of the revised Policy.

If you have any questions, concerns, or feedback regarding this Boss96 Privacy Policy, or wish to exercise any of your privacy rights, please contact us through the following channels: 24/7 live chat within the Boss96 platform, or email support@boss96.click with the subject line "Privacy Enquiry". Our privacy team will respond within 3 business days in Bahasa Malaysia.

Your Privacy Rights at Boss96

A straightforward summary of what you can do regarding your personal data

Contact Us

For any privacy enquiries, contact our team via 24/7 live chat or email support@boss96.click with the subject line "Privacy Request".

Response Within 3 Business Days
Request a Copy of Your Data

You may request a complete copy of all personal data boss96 holds about you — delivered in a readable format within 30 working days.

Free & Easy
Delete Your Data

Where applicable, you may request the deletion of your personal data. Requests are processed in accordance with relevant legal retention obligations.

Subject to MY Law

FAQ — Boss96 Privacy Policy

The most frequently asked questions from Malaysian players about data privacy at Boss96

No. Boss96 does not store your eWallet account number, debit card number, or bank account details directly in our systems. When you make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX, the transaction is processed by a payment gateway that complies with strict PCI DSS security standards. Boss96 only receives confirmation that the payment was successful and records the transaction amount for your account — not the sensitive details of your payment method. This is an additional layer of protection for your financial security.

No. Your betting history on boss96 — whether on Malaysia Super League football, EPL, live casino, slots, table games, or Virtual Sports — is completely confidential. Only you, when logged into your account, can view your activity records. On boss96's side, only specifically authorised staff with a legitimate business need — such as the customer support team when handling your complaints, or the compliance team when conducting mandatory investigations — can access account records. All such access is logged and regularly audited.

Boss96 employs multiple layers of protection to defend player data against cyber threats. These include 256-bit SSL encryption for all data transmissions, at-rest encryption for stored information, intrusion detection systems operating 24/7, enterprise-grade firewalls, and regular security testing by independent experts. We also maintain comprehensive incident response procedures that are tested on a regular basis. Beyond these technical measures, we encourage players to enable 2FA on their Boss96 account as an additional layer of protection on the user side.

When you close your Boss96 account, your identity data and key personal information will be deleted or anonymised within 90 days of the closure date. However, financial transaction records must be retained for 7 years as required under Malaysian financial law, and betting history is kept for 5 years for compliance and responsible gambling purposes. Any data retained in this way will be held in highly secure systems with strictly limited access and will not be used for any marketing or commercial purpose.

No. Boss96 only sends marketing communications to players who have given explicit consent to receive them, either during registration or through their account settings. Every marketing communication we send — whether it's a bonus promotion notice, upcoming football tournament information, or a new slots offer — will include a clear unsubscribe option. You may also update your communication preferences at any time through your Boss96 account settings. Changes will take effect within 48 hours and will not affect any of the core platform services you use.

Contact the Boss96 Privacy Team

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how Boss96 handles your personal data, our team is here to help. We pride ourselves on prompt, clear responses in both English and Bahasa Malaysia.

Contact us via 24/7 live chat on the boss96 platform or email support@boss96.click with the subject line "Privacy Request". All privacy enquiries will be acknowledged within 3 working days and resolved within 30 working days.

Your Responsible Gambling Data is Protected

Boss96 uses gaming activity data to protect you, not to exploit you

Protection Monitoring: Boss96 uses your gaming activity data internally to identify patterns that may indicate problem gambling. This information is used solely for protective purposes — to allow us to reach out with relevant support information where necessary. It is never shared with external parties.

Limits You Set Yourself: Your deposit limit and loss limit settings in your boss96 account are confidential personal information. Only you and authorised boss96 support staff can view these settings, which are used solely to enforce the protections you have chosen for yourself.

External Assistance: Talian Kasih 15999 is a confidential helpline that is independent of boss96 — we do not receive or share any information about players who contact this line. If you need help with a gambling-related issue, you can reach out to them with full confidence that your privacy is protected.

A Platform You Can Trust

Your Privacy Is Protected — Join 500,000+ Boss96 Players with Confidence

Your personal data is protected by 256-bit SSL encryption. No data sales. Full control in your hands. Join the Malaysian player community that has trusted Boss96 since 2018.

256-bit SSL — Bank-Grade Security No Sale of Personal Data Full Control in Your Hands 24/7 Privacy Support
Bahasa Melayu