Data Protection

Privacy Policy Bosskuu — Your Data, Our Responsibility

At bosskuu, your privacy is not merely a legal obligation — it is a commitment we take seriously in every system design decision we make. Read how we manage and protect your personal data.

Updated: January 2026 Language: Malay (Malaysia) Version: 2.5
Our Privacy Commitment
  • 256-bit SSL encryption at all times
  • Data is not sold to third parties
  • Privacy controls in your hands
  • Comply with Malaysia PDPA
  • Data deletion upon request

Bosskuu's Six Core Privacy Principles

The way we handle data does not merely comply with the law — it is designed to give every bosskuu member peace of mind.

Full Data Encryption

All data transmitted between your device and bosskuu's servers is encrypted using 256-bit SSL — the same standard used by Malaysia's leading banks. No one in between can read your data.

Secure Data Storage

Bosskuu member data is stored on servers protected by multi-layered firewalls, strict access controls, and real-time intrusion detection systems. Data access is granted only to staff who require it to perform their duties.

No Sale of Personal Data

Bosskuu has never and will never sell, rent, or provide member personal data to advertisers or third-party marketing companies. Your data belongs to you — we only use it for purposes you have consented to.

Privacy Controls in Your Hands

You have the right to access, correct, or request deletion of your personal data at any time. Requests can be submitted via your account panel or through our support email and will be processed within 30 days.

Transparent Cookies

Bosskuu uses cookies to enhance the user experience and analyse platform traffic. You are informed of cookie usage and can manage your cookie preferences through your browser settings at any time.

Malaysia PDPA Compliance

The bosskuu Privacy Policy is designed to comply with Malaysia's Personal Data Protection Act (PDPA) 2010. We respect your rights under this law and provide clear channels for you to exercise them.


Introduction

Bosskuu ("we", "Platform" or "bosskuu.net") takes the protection of our members' personal data as a responsibility we do not take lightly. This Privacy Policy clearly explains what data we collect, why we need it, how we use it, and what rights you hold as the owner of that data.

This document applies to all users of the bosskuu platform, including website visitors, registered users, and active members. By using our platform, you agree to the privacy practices described in this Policy.

This Privacy Policy complements Terms and Conditions us. In the event of any conflict between the two documents on matters of privacy, this Privacy Policy shall take precedence.

Language Note: This Privacy Policy is written in English for the convenience of our Malaysia members. If you require clarification in another language, our support team is ready to assist.

Personal Data We Collect

Bosskuu collects the personal data necessary to provide our services safely and effectively. The following are the categories of data we collect:

2.1 Data You Provide Directly
Data Categories Example Information Requirements
Identity Full name, date of birth, IC or passport number Required (KYC)
Contact Email address, mobile phone number Required
Financial Bank name, bank account number, digital wallet details Required (withdrawal)
Address Residential address, city, postcode, state Required (KYC)
Login Username, password (in hashed form) Required
2.2 Data Collected Automatically
  • IP address and general geolocation information
  • Device type, operating system and browser version
  • Session data — pages visited, access times, and in-platform actions
  • Game data — bets, wins, losses, and game history
  • Transaction data — deposit history, withdrawals, and account balance
  • Technical error logs and app crash reports

How Your Data Is Used

The data we collect is used solely for legitimate purposes necessary to operate the bosskuu platform. We do not use your data for any purpose beyond what is stated here without your explicit consent.

  • Account Management: Register, verify identity and manage member accounts
  • Transaction Processing: Process deposits, withdrawals and bonus payments securely
  • KYC Verification: Meet identity compliance and anti-money laundering legal requirements
  • Platform Security: Detect and prevent fraud, unauthorised access and suspicious activity
  • Customer Support: Respond to enquiries, resolve complaints and provide technical assistance
  • Product Improvement: Analyse usage patterns to improve the interface and user experience
  • Communications: Send important account notifications, security updates and promotional information (where you have given consent)
  • Legal Compliance: Comply with legal and regulatory obligations applicable to our platform's operations

Marketing Communications: You can opt out of marketing emails at any time via the unsubscribe link in those emails or through the communication preferences settings in your account panel. However, important account and security notifications cannot be unsubscribed from, as they are essential to your account's security.

Data Sharing with Third Parties

Bosskuu does not sell, rent, or transfer your personal data to third parties for marketing purposes. Data sharing only occurs in the following limited and necessary circumstances:

4.1 Required Service Providers

We share only the minimum necessary data with service providers that help us operate the platform — including payment processors, game software providers, customer support platforms and cloud services. All providers are bound by strict confidentiality agreements and are only permitted to use your data for specified purposes.

4.2 Legal Requirements

Bosskuu will disclose personal data if required to do so by law, court order, or direction from a lawful authority. We will notify you of any such request to the extent permitted by law.

4.3 Security Protection

In cases where we believe there is a threat to the safety of a member, the platform, or a third party, we may share necessary information with relevant authorities or our internal security team.

Data Security Measures

Protecting your personal data is our top technical priority. Here are the security layers we apply:

  • Transit Encryption: All communication between your browser/app and our servers is encrypted with TLS 1.3 and 256-bit SSL certificates.
  • Storage Encryption: Sensitive data including financial information and identity documents is stored in encrypted form in our database.
  • Hashed Password: Your password is never stored in plain text. We use the robust bcrypt hashing algorithm.
  • Two-Factor Authentication: 2FA is available and encouraged for all accounts, and mandatory for withdrawals exceeding certain limits.
  • Real-Time Monitoring: Our automated monitoring system detects unusual activity 24/7 and sends alerts to our security team.
  • Internal Access Controls: Access to member data is restricted to staff who require it, with a full audit log for every access.
  • Regular Penetration Testing: Our platform undergoes regular security testing by independent third parties to identify and address vulnerabilities.

If You Suspect a Data Breach: While we take all reasonable precautions, no system is 100% foolproof. If you suspect your account has been accessed without authorisation, contact our support team immediately via live chat in your account panel.

Cookie Policy

Cookies are small text files stored on your device when you visit a website. bosskuu uses cookies for several different purposes:

Types of Cookies We Use
Cookie Types Purpose Duration
Session Cookies Maintain your login status during an active session Until browser is closed
Preference Cookies Store your language, theme and display preferences 1 year
Analytics Cookies Analyse usage patterns to improve the platform 6 months
Security Cookies Identify legitimate sessions and prevent fraud Current session

You can block or delete cookies through your browser settings. However, blocking essential cookies may affect the functionality of the bosskuu platform.

Your Rights Under PDPA

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights regarding the personal data held by bosskuu:

01
Right of Access

You have the right to request a copy of the personal data we hold about you. Requests will be processed within 14 business days.

02
Right to Correction

If your data is inaccurate or outdated, you have the right to request a correction through your account panel or customer support.

03
Right to Erasure

You may request deletion of your personal data, subject to any applicable legal retention obligations.

04
Right to Object

You may object to the processing of your data for direct marketing purposes at any time without providing a reason.

05
Right to Portability

You have the right to receive your data in a machine-readable format for transfer to another service provider.

06
Right to Complain

If you are not satisfied with how we handle your data, you have the right to file a complaint with the Department of Personal Data Protection Malaysia.

To exercise any of the above rights, contact our privacy team via customer support in your bosskuu account panel. We will acknowledge your request within 3 business days and resolve it within 30 calendar days.

KYC & AML Compliance

As a responsible platform, bosskuu is required to comply with anti-money laundering (AML) and Know Your Customer (KYC) regulations. This means we may request additional documents from members under certain circumstances.

KYC Documents That May Be Requested
  • Malaysian Identity Card (MyKad) or valid passport — to verify identity
  • Utility bill, bank statement, or other official document — to verify residential address
  • Bank statement or screenshot of your banking account — to verify ownership of the payment method
  • Source of funds information — for withdrawals exceeding certain limits, in line with AML requirements

All KYC documents are stored with full encryption and are only accessible by authorised compliance staff. Documents will not be shared unless required by law.

Data Retention Period

Bosskuu retains your personal data for as long as necessary for the purposes stated in this Policy or as required by law. The following are general retention period guidelines:

  • Active Account Data: For the duration of your active account plus 5 years after account closure (AML requirement)
  • Transaction Records: Minimum 7 years from the transaction date (accounting and legal requirement)
  • KYC Documents: Minimum 5 years after the end of the business relationship (AMLA requirement)
  • Communication Logs: 2 years from the date of last communication
  • Analytics Data: In anonymised form, indefinitely for product improvement purposes

Once the retention period expires, data will be securely deleted or anonymised in accordance with our procedures.

Changes to This Privacy Policy

Bosskuu may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. Any material changes will be communicated to you via your registered email or a notice prominently displayed on the platform at least 14 days before the changes take effect.

We encourage you to review this Privacy Policy periodically. The "Updated" date at the top of this page will always reflect the latest version.

Automated Notifications: Active bosskuu members will automatically receive email notifications whenever material changes are made to this Privacy Policy. Keep your email address up to date in your account panel to ensure you never miss an important notification.

Contact Our Privacy Officer

If you have any questions, concerns or wish to exercise your rights under this Privacy Policy, you may reach the bosskuu privacy team through the following channels:

  • Privacy Email: [email protected] (displayed as plain text)
  • Live Chat: Available 24/7 in your bosskuu account panel — select the "Privacy & Data" topic
  • FAQ: Privacy FAQs are available on the FAQ us

We aim to respond to all privacy-related enquiries within 3 business days and resolve requests within 30 calendar days as required by PDPA.


Join bosskuu with Complete Confidence

Your privacy and data security are our top priority. Register today and enjoy Malaysia's entertainment platform that respects your data as much as it respects your trust.

For users aged 18 and above. Terms and Conditions Responsible Gaming

Bahasa Melayu