Bosku33 Privacy Policy – Personal Data Protection for Malaysia Members

1 Introduction — Who We Are and Why This Policy Matters

Bosku33 ("we", "Platform") is an online entertainment platform operating in Malaysia, serving over 680,000 active members every month from across the country. In the course of our operations, we collect and process certain personal data necessary to provide a safe, fair, and responsible service to every member.

This Privacy Policy is designed to explain clearly and transparently: what personal data we collect from you, how and why it is used, who has access to it, how long it is retained, and what rights you have over it. We believe you deserve to know all of this before providing us with any personal information.

2 Personal Data We Collect From You

Bosku33 only collects data that is strictly necessary to provide our services. We do not collect excessive or irrelevant data. The categories of data we collect are as follows:

2.1 Data You Provide Directly

• Identity information: Full name, date of birth, MyKad number (when identity verification is required for withdrawals exceeding a certain limit).
• Contact information: An active Malaysian mobile number, and email address (if provided).
• Financial information: Malaysian bank or e-wallet account name (DuitNow, FPX via Maybank2u or CIMB Clicks, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay) for the purpose of processing MYR deposits and withdrawals.
• Account information: Your username, password (stored in encrypted hash form — we do not store passwords in plain text), and account settings.

2.2 Automatically Collected Data

• Usage data: Login records, game history, betting history, and transactions carried out on the bosku33 platform.
• Technical data: IP address, device type, operating system, browser type, and screen resolution — used to optimise how the platform displays on your device.
• Location data: General location based on IP address for geographic compliance and fraud prevention purposes — we do not access your device's GPS or precise location.
• Cookie data: Session cookie information and preferences stored in your browser to keep the platform's core functions running smoothly.

3 How We Use Your Personal Data

The personal data we collect is used exclusively for the following purposes, each directly related to the operation of the bosku33 platform and the delivery of services to you:

Bosku33 does not use your personal data to make automated decisions that have a significant impact on you without human involvement. Any major decisions — such as account closures or withdrawal rejections — are reviewed by our team before being carried out.

4 Legal Basis for Data Processing

Bosku33 processes your personal data on the following legal bases in accordance with Malaysia's PDPA 2010:

• Consent: For marketing and promotional communications — you may give or withdraw this consent at any time in your account settings or by contacting our support team.
• Contract Performance: For data required to process deposit and withdrawal transactions in MYR, manage your account, and deliver the services you have requested.
• Legitimate Interest: For fraud prevention, platform security, identity verification and service improvement — these interests are always balanced against your right to privacy.
• Legal Obligation: For compliance with anti-money laundering (AML) requirements, tax obligations, and reporting requirements to the relevant Malaysian authorities where mandated by law.

5 Sharing Personal Data with Third Parties

Bosku33 does not sell, rent, or share members' personal data with third parties for their own marketing, advertising, or commercial purposes. However, in the normal course of platform operations, there are limited situations where data may need to be shared:

5.1 Contracted Service Providers

Bosku33 works with third-party service providers that support the operation of our platform — including payment gateway providers (for processing MYR deposits and withdrawals), game providers (such as Pragmatic Play, PG Soft, and others), customer support service providers, and cybersecurity service providers. All providers are contractually bound to protect your data and may only use it for the specific services they provide to bosku33.

5.2 Legal Requirements

Bosku33 may be required by law or by direction of Malaysian authorities to disclose certain personal data. This includes requests from law enforcement agencies, courts, financial regulatory bodies, or tax authorities. In such situations, we will disclose only the minimum data required and will notify you if we are permitted to do so by law.

6 Data Security — How We Protect Your Information

Bosku33 invests seriously in data security infrastructure to ensure your personal and financial information remains protected at all times. The key security measures we have in place are:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and bosku33's servers is encrypted using TLS 1.3 — the highest security standard available today.
• Data encryption at rest: Sensitive data stored in our databases — including identity information and payment details — is encrypted using AES-256, even when at rest.
• Two-factor authentication (2FA): bosku33 account login is protected by SMS OTP verification sent to your registered Malaysian mobile number.
• 24/7 security monitoring: An intrusion detection system operates continuously to identify and block any unauthorised access attempts or suspicious activity.
• Internal access controls: Only bosku33 staff who require access to perform their duties are permitted to view member data — with varying permission levels assigned according to their role.
• Regular security testing: bosku33 conducts regular independent penetration testing and security audits to identify and patch any vulnerabilities before they can be exploited.

7 Personal Data Retention Period

Bosku33 retains your personal data only for as long as necessary for the purposes stated in this policy, or as required under applicable Malaysian law. Our general principles are:

• Active account data: Retained for as long as your account is active and in use on the bosku33 platform.
• Data following account closure: Transaction records and basic identity information are retained for a minimum of 7 years following account closure to comply with anti-money laundering regulations and financial audit requirements.
• Login and activity data: Technical logs are retained for 90 days for security and incident investigation purposes, then automatically deleted.
• Marketing data: If you have given consent for marketing communications, this data is retained until you withdraw your consent or contact us to have it deleted.

Once the retention period expires, bosku33 will securely delete or anonymise your personal data so that it can no longer be linked back to you as an individual.

8 Your Rights as a bosku33 Member

Under Malaysia's PDPA 2010 and bosku33's Privacy Policy, you have the following rights regarding the personal data we hold about you:

• Right of Access: You may request a copy of the personal data we hold about you at any time. We will provide this information within 14 business days.
• Right to Rectification: If your data is inaccurate or incomplete, you have the right to request a correction. Most basic information can be updated directly in your account settings.
• Right to Erasure: You may request the deletion of your personal data when it is no longer needed, except where legal requirements mandate its continued retention.
• Right to Restrict Processing: You may request that we restrict the processing of your data in certain situations — for example, while you are disputing the accuracy of your data.
• Right to Object: You may object to the processing of your data for legitimate interest purposes or direct marketing at any time.
• Right to Withdraw Consent: For processing that relies on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the validity of any processing that took place prior to withdrawal.

To submit any request relating to the rights above, please contact the bosku33 Data Privacy team by email at support@bosku33.site with "Data Privacy Request" in the email subject line. We are committed to responding within 7 business days.

9 Cookies and Tracking Technologies

Bosku33 uses cookies and similar tracking technologies to keep the platform running smoothly and to give you a better experience. The categories of cookies we use are:

9.1 Essential Cookies (Required)

These cookies are required for the platform's core functions — including maintaining your login session, remembering your language preference, and securing your transactions. Without them, bosku33 cannot operate properly. These cookies cannot be disabled.

9.2 Analytics Cookies (Optional)

We use internal analytics to understand how members use the bosku33 platform — which pages are visited most, how long play sessions last, and which features are most popular. This data is collected in aggregated, anonymised form for platform improvement purposes only.

9.3 Preference Cookies (Optional)

These cookies store your preferences — such as display settings, your last played game, and your preferred odds format — so you do not have to reconfigure them each time you log in. You can delete these cookies through your browser settings at any time.

10 International Data Transfers

Some of the service providers we work with may store or process data outside Malaysia — for example, game servers from international providers such as Pragmatic Play or PG Soft. In all such cases, bosku33 ensures that:

• Data is only transferred to countries or entities that provide an equivalent or higher level of data protection than Malaysia.
• A legally binding Data Processing Agreement is signed with every third-party provider involved.
• Only the minimum necessary data is transferred — bosku33 does not grant external vendors full access to member data.
• You will be informed of any material data transfers involving your personal data through updates to this Privacy Policy.

11 Protection of Children and Minors

The bosku33 platform is exclusively for individuals aged 21 and above. We do not knowingly accept registrations from or provide services to anyone under the age of 21. During registration, we collect date of birth and conduct an age verification check. If we find that a member has provided false age information, the account will be closed immediately.

If you are a parent or guardian and have discovered that your minor child has registered an account on bosku33, please contact us immediately at support@bosku33.site. We will close the account and delete all associated data within 48 hours, with no conditions attached.

12 Privacy Policy Updates and How to Contact Us

Bosku33 reserves the right to update this Privacy Policy from time to time to reflect changes in our operations, the latest legal requirements, or industry best practices. Members will be notified of any material changes via an in-platform notification or email at least 14 days before the changes take effect.

The "Last Updated" date at the top of this document will always reflect the latest version currently in force. We recommend checking this page periodically — at least once every three months — to stay informed about how we manage your data.

For any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, you may reach us through:

• Email: support@bosku33.site (include "Privacy Enquiry" in the subject line)
• LiveChat: Available 24 hours a day on the bosku33 platform
• Response time: We aim to respond within 2 hours for general enquiries and within 7 working days for formal data rights requests.

Last updated: January 2026 · Version: 3.1 · Platform: bosku33.site · Contact: support@bosku33.site