BOS88 is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and the rights you hold as a player on our platform.
Last Updated:
1 January 2026
This Privacy Policy ("Policy") issued by BOS88 ("we", "us", "our", or "the Platform"), the operator of the online casino and sports betting service accessible at bos88.casa (the "Website"). This Policy applies to all Users ("you", "your") who access, register on, or interact with the BOS88 Platform in any capacity.
BOS88 is committed to handling personal data responsibly, transparently, and in accordance with applicable international data protection standards. We collect only the personal data that is genuinely necessary to deliver our services, maintain account security, fulfil our legal and regulatory obligations, and continuously improve the player experience for our community across Malaysia.
By creating an account on BOS88 or by otherwise using the Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, please discontinue use of the Platform and contact support to request account closure.
Note: This Privacy Policy should be read alongside the Terms & Conditions and the Responsible Gambling Policy, which together form the complete framework governing your relationship with BOS88.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
BOS88 collects Personal Data from Users through several channels — directly when you interact with the Platform, automatically when you use our services, and in some cases from third-party verification partners. The categories of data we collect are as follows:
| Data Category | Examples | Collection Method |
|---|---|---|
| Registration Data | Full name, email address, date of birth, username, phone number | Provided directly by User at registration |
| Identity & KYC Data | MyKad / Passport copy, selfie photograph, proof of address (utility bill, bank statement) | Submitted via KYC verification portal |
| Transaction Data | Deposit amounts, withdrawal requests, payment method type (e.g., Touch 'n Go eWallet, Maybank), transaction timestamps | Generated automatically during Platform use |
| Gaming Activity Data | Game history, bet amounts, session duration, wagering patterns, bonus usage | Generated automatically during gameplay |
| Technical Data | IP address, device type, browser type and version, operating system, unique device identifiers, timezone settings | Collected automatically via cookies and server logs |
| Communication Data | Live chat transcripts, email correspondence, support ticket content | Collected when you contact customer support |
| Marketing Preferences | Opted-in promotional communication preferences, notification settings | Provided directly by User or inferred from account settings |
We do not collect sensitive Personal Data such as racial or ethnic origin, religious beliefs, or biometric data beyond what is strictly required for identity verification purposes under our KYC programme.
BOS88 processes your Personal Data for the following specific purposes:
Registration Data is processed to create and maintain your BOS88 account, authenticate your identity at login, and manage your account profile. This processing is necessary to fulfil our contractual obligations to you as a registered User.
KYC Data is processed to verify that you meet BOS88's eligibility requirements (including the21+ age requirement), to comply with our obligations under applicable anti-moneylaundering (AML) and counter-terrorism financing (CTF) frameworks, and to detect and prevent fraudulent activity on the Platform. This processing is necessary for compliance with our legal obligations.
Transaction Data is processed to facilitate deposits via Malaysian payment channels includingTouch 'n Go eWallet, Boost, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank, and to process withdrawal requests to your registered payment instruments. This processing is necessary for performance of the contract between you and BOS88.
Gaming Activity Data and Transaction Data are processed to monitor for patterns associated with problem gambling, to enforce deposit limits and self-exclusion requests, and to fulfil BOS88's duty of care obligations to our player community. This processing is carried out both for contractual performance and in the legitimate interest of player welfare.
Communication Data is processed to respond to support enquiries, resolve complaints, and maintain records of player interactions for quality assurance and dispute resolution purposes.
Technical Data and aggregated Gaming Activity Data are processed to analyse Platform performance, diagnose technical issues, and improve the user experience. This processing is carried out in BOS88's legitimate interest in maintaining and developing high-quality service.
Where you have provided explicit consent, your Registration Data and Marketing Preferences may be used to send you information about BOS88 promotions, bonuses, and platform updates. You may withdraw consent for marketing communications at any time by updating your notification preferences in your account settings or by contacting support.
BOS88 processes your Personal Data under one or more of the following legal bases, depending on the specific processing activity:
BOS88 does not sell your Personal Data to any third party under any circumstances. We may, however, share your data with carefully selected categories of recipients as described below:
Transaction Data is shared with the relevant payment processor (e.g., the gateway operator facilitating Touch 'n Go eWallet, Boost, DuitNow, FPX, or bank transfer transactions) to the extent necessary to execute your requested deposit or withdrawal. Payment processors operate under their own data protection obligations and are contractually prohibited from using your data for any purpose beyond the specific transaction.
KYC Data may be shared with contracted identity verification service providers who assist BOS88 in confirming document authenticity and compliance with AML/CTF obligations. These providers act as Data Processors under binding data processing agreements.
Anonymised or pseudonymised Gaming Activity Data may be shared with our game studio partners for fair-play auditing purposes. No directly identifiable Personal Data is shared with game studios.
BOS88 may disclose Personal Data to competent regulatory, law enforcement, or judicial authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, safety, or property of BOS88, our players, or the public. Such disclosures will be made only to the minimum extent required by law.
In the event of a merger, acquisition, or sale of all or substantially all of BOS88's assets, Personal Data may be transferred to the acquiring entity as part of that transaction, subject to the continued application of this Privacy Policy or a substantially equivalent successor policy.
No Third-Party Marketing: BOS88 will never share your Personal Data with third parties for their own marketing, advertising, or data-resale purposes. Your data belongs to you — we treat it accordingly.
BOS88 uses cookies and similar tracking technologies to operate the Platform effectively, maintain session integrity, and improve the user experience. Cookies are small text files stored on your device by your browser.
You may configure your browser settings to refuse non-essential cookies or to alert you when cookies are being set. Please note that disabling strictly necessary cookies will prevent the Platform from functioning correctly. Specific browser cookie management instructions are available in your browser's help documentation.
BOS88 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:
Upon expiry of the applicable retention period, Personal Data will be securely deleted or irreversibly anonymised in accordance with BOS88's data disposal procedures.
BOS88 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Our security programme includes:
Your Responsibility: While BOS88 maintains robust security on its infrastructure, you are responsible for the security of your own device and account credentials. Choose a strong, unique password for your BOS88 account and never share your login details with any third party.
As a User of BOS88, you hold the following rights in respect of your Personal Data. To exercise any of these rights, contact BOS88 support via live chat or email:
You may request a copy of the Personal Data BOS88 holds about you, along with information on how it is being processed. We will respond within a reasonable timeframe.
You may request correction of any inaccurate or incomplete Personal Data held your account. Some corrections may require re-verification of your identity.
You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
You may request that BOS88 restrict processing of your data in certain circumstances — for example, while you contest the accuracy of data we hold.
Where technically feasible, you may request a copy of your Personal Data in a structured, machine-readable format for transfer to another service provider.
Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
BOS88 will respond to valid rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days — you will be notified of any extension. Please note that certain rights are subject to legal exceptions; where an exception applies, BOS88 will explain the basis for any refusal.
The BOS88 Platform integrates with a range of third-party service providers to deliver its full suite of gaming and payment services. These third-party services operate under their own privacy policies and data protection practices, which are independent of this Policy.
Categories of third-party services integrated with BOS88 include: licensed game studios providing slot, live casino, and arcade game content; payment gateway operators processing MYR transactions via Touch 'n Go eWallet, Boost, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong; KYC and identity verification service providers; customer support technology platforms; and analytics and infrastructure hosting providers.
BOS88 requires all contracted third-party processors to: (i) process Personal Data only in accordance with BOS88's documented instructions; (ii) implement appropriate technical and organisational security measures; and (iii) not sub-process data without BOS88's prior written authorisation. These obligations are embedded in contractual Data Processing Agreements with each processor.
No External Links Policy: BOS88's Platform does not contain links to external third-party websites. Any website accessible independently at separate domain or URL is not governed by this Privacy Policy, and BOS88 accepts no responsibility for its data practices.
BOS88's services are strictly intended for adults aged21 (twenty-one) years and above. We do not knowingly collect, process, or retain the Personal Data of any individual below this age threshold.
As part of our registration and KYC procedures, BOS88 verifies the age of all players. Where BOS88 becomes aware — or has reasonable grounds to suspect — that an account has been registered by an individual under 21, the account will be immediately suspended. Any deposits made will be refunded to the originating payment instrument following investigation, and no winings derived from gameplay by an underage User will be paid out.
If you have reason to believe that a person under 21 has accessed or registered on BOS88 using false information, please contact our support team immediately at the contact details provided in Section 14of this Policy.
Parental Notice: If you are the parent or guardian of a minor and you believe they have registered on BOS88, please contact our support team immediately via live chat. We will investigate and close the account without delay, refunding any deposits in accordance with our procedures.
BOS88 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or operational requirements. The "Last Updated" date displayed in the Table of Contents will be updated to reflect the date of the most recent revision.
For material changes that significantly affect how we process your Personal Data or that materially alter your rights under this Policy, BOS88 will endeavour to provide reasonable advance notice via email to your registered address or via an in-platform notification. Continued use of the Platform following publication of a revised Policy constitutes acceptance of the updated terms.
We encourage you to review this Policy periodically — particularly before making any significant account activity such as completing KYC verification or requesting a large withdrawal — to ensure you remain fully informed of how your data is handled.
If you have any questions, concerns, or requests regarding this Privacy Policy or the manner in which BOS88 processes your Personal Data, please contact us through the following channels:
BOS88 is committed to resolving all data-related concerns promptly and fairly. We will acknowledge receipt of your request within 3 business days and provide a substantive response within 30 calendar days.
If you are not satisfied with BOS88's response to a privacy complaint, you may seek further recourse through the applicable supervisory authority or data protection regulator in your jurisdiction.
A summary of the key data protection commitments BOS88 maintains for every registered player.
Every connection to BOS88 is secured with TLS encryption. Whether you're topping up via Touch 'n Go eWallet or checking your game history, your data travels encrypted at every step.
BOS88 will never sell, rent, or trade your Personal Data to any third party for marketing or commercial purposes. Your information is used only to operate your account and fulfil our legal obligations.
Access to your Personal Data within BOS88's internal systems is limited to authorised personnel on a need-to-know basis. All internal data access is logged and periodically reviewed.
Your MyKad, passport scan, and proof-of-address documents are stored using encryption at rest and accessed only by trained compliance personnel. KYC data is retained only as long as legally required.
You have the right to access, correct, restrict, or request deletion of your Personal Data at any time. Contact BOS88 support to exercise any of your data rights — we'll respond within 30 days.
Promotional communications from BOS88 are sent only with your explicit consent. You can withdraw marketing consent at any time via your account settings or by contacting support — no questions asked.
BOS88 handles your data with the same care we bring to every part of the platform. Have questions about your account or our data practices? We're online24/7 to help.
For players aged 21 and above only. Please gamble responsibly.