Privacy Policy

This Privacy Policy (hereinafter referred to as "the Policy", "this Policy", or "Privacy Policy") is issued by Bosku33 (hereinafter referred to as "Bosku33", "We", "Us", or "Our") and applies to all personal data collected, processed, stored, and transmitted in connection with your use of the website located at https://bosku33.cam and all associated services, games, applications, and features (collectively, "the Platform" or "the Services").

Bosku33 is committed to protecting the privacy and personal data of all registered members and website visitors, including players across Malaysia — from Kuala Lumpur and Petaling Jaya to Penang, Johor Bahru, Shah Alam, and beyond. This Policy is designed to be transparent, comprehensive, and compliant with applicable data protection regulations, including but not limited to the Personal Data Protection Act 2010 (PDPA) of Malaysia.

By accessing the Bosku33 platform, registering an account, depositing funds, or otherwise using our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Policy, you must cease using the Platform immediately.

For the purposes of this Privacy Policy, the following defined terms shall apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, identification number, contact details, financial data, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means Bosku33, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of Bosku33 pursuant to a written data processing agreement.
• "Data Subject" means you — the individual whose Personal Data is being processed.
• "Consent" means any freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a specified purpose.
• "KYC Documents" means identity verification documents submitted by a Player during the Know Your Customer verification process, including government-issued identification and proof of address.
• "Cookies" means small text files placed on your device by the Bosku33 platform for the purposes of session management, analytics, and personalisation.
• "PDPA" means the Personal Data Protection Act 2010 of Malaysia, which governs the processing of personal data in commercial transactions.

Bosku33 collects Personal Data in order to provide, maintain, and improve the Services. The categories of data we collect are set out in the table below:

Bosku33 collects Personal Data through the following channels:

4.1 Directly from You

• When you register an account on the Bosku33 platform, including providing your name, email, mobile number, and date of birth.
• When you complete KYC verification by uploading identity and address documents.
• When you make a deposit or withdrawal using Malaysian payment methods such as Touch 'n Go eWallet, DuitNow, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, or FPX.
• When you contact our customer support team via live chat or email.
• When you opt in to receive promotional communications, VIP programme updates, or platform notifications.

4.2 Automatically Through Your Use of the Platform

• Technical data including your IP address, device identifiers, browser specifications, and session timestamps collected automatically when you access the platform.
• Behavioural and gameplay data generated as you interact with the games, place bets, and navigate the platform.
• Cookie and tracking data as described in Section 10 of this Policy.

4.3 From Third Parties

• Identity verification data from authorised KYC service providers used to verify the authenticity of documents you submit.
• Fraud prevention and anti-money-laundering data from licensed compliance partners and industry fraud databases.
• Payment verification data from payment gateway operators processing your MYR transactions.

Bosku33 processes your Personal Data on one or more of the following legal grounds, in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA) and applicable international data protection principles:

• Contractual Necessity: Processing necessary to fulfil our contractual obligations to you as a registered platform member — including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money-laundering (AML) requirements, age verification mandates, and tax reporting duties.
• Legitimate Interests: Processing carried out in pursuit of our legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and product improvement — provided such interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given and specific consent, principally in the context of marketing communications and optional data sharing. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Bosku33 processes your Personal Data exclusively for the following clearly defined purposes:

1. Account Management: Creating, maintaining, and administering your Bosku33 account, including authentication, password management, and account recovery.
2. Identity Verification (KYC): Verifying your identity, age, and address to comply with regulatory requirements and prevent the use of the platform by persons under the age of 21.
3. Payment Processing: Facilitating deposits and withdrawals in MYR via Malaysian payment channels including Touch 'n Go eWallet, DuitNow, FPX, and major banks such as Maybank, CIMB, and Public Bank.
4. Regulatory Compliance: Meeting obligations under applicable anti-money-laundering, counter-terrorist financing, and responsible gambling legislation.
5. Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, collusion, and other prohibited conduct.
6. Customer Support: Responding to your enquiries, processing complaints, and providing technical assistance.
7. Responsible Gambling Monitoring: Monitoring gameplay patterns to identify indicators of problem gambling and to give effect to self-exclusion, deposit limit, and session time requests.
8. Platform Improvement: Analysing aggregate usage data to identify performance issues, improve game offerings, and enhance the player experience.
9. Marketing Communications: Sending promotional offers, VIP programme updates, and platform news where you have consented to receive such communications. You may unsubscribe at any time.

Bosku33 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We may disclose your Personal Data to the following categories of recipients strictly on a need-to-know basis and subject to appropriate data protection safeguards:

7.1 Service Providers and Data Processors

Third-party service providers who assist in the delivery of our Services — including payment processors, KYC verification providers, fraud prevention platforms, cloud infrastructure operators, and customer support software vendors — may access Personal Data solely to perform their contracted functions. All such processors are bound by written data processing agreements that restrict their use of your data.

7.2 Regulatory and Law Enforcement Authorities

Bosku33 may disclose Personal Data to governmental authorities, regulatory bodies, law enforcement agencies, or courts where required by applicable Malaysian or international law — including disclosure under the PDPA, anti-money-laundering legislation, or a valid court order. We will, where legally permitted, notify you of such disclosures.

7.3 Gaming Industry Compliance Bodies

In cases involving suspected fraud, collusion, match-fixing, or other prohibited activities, Bosku33 may share relevant data with authorised gaming industry compliance organisations and fraud prevention networks to protect the integrity of the platform and the wider gaming ecosystem.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving Bosku33, your Personal Data may be transferred to the successor entity as part of that transaction. You will be notified of any such change and your rights under this Policy will continue to apply.

Bosku33 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable legal and regulatory obligations. The following general retention guidelines apply:

• Account Data: Retained for the duration of your active account plus a minimum period of five (5) years following account closure, in accordance with anti-money-laundering record-keeping requirements.
• KYC Documents: Retained for a minimum period of five (5) years following the date of last transaction or account closure, as required under applicable AML regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years following the date of the relevant transaction, in compliance with financial record-keeping legislation.
• Customer Support Records: Retained for three (3) years from the date of the support interaction.
• Marketing Preferences: Retained until you withdraw consent or for three (3) years of inactivity, whichever occurs first.

Upon expiry of the applicable retention period, your Personal Data will be securely deleted or anonymised in such a way that it can no longer be associated with your identity.

Bosku33 implements comprehensive technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• Encryption: All data transmitted between your device and Bosku33 servers is protected by 256-bit SSL/TLS encryption. Sensitive data stored in our systems is encrypted at rest using industry-standard algorithms.
• Access Controls: Access to Personal Data within Bosku33 is strictly controlled on a role-based, need-to-know basis. All system access is logged and audited.
• Two-Factor Authentication: All Bosku33 staff accounts with access to player data are protected by mandatory two-factor authentication. Players are strongly encouraged to enable 2FA on their own accounts.
• Security Monitoring: Our infrastructure is monitored continuously for security threats, anomalous access patterns, and potential data breaches. Automated alerts are in place for high-risk events.
• Regular Security Audits: Bosku33 conducts periodic security assessments, penetration testing, and vulnerability scans to identify and remediate potential weaknesses before they can be exploited.
• Staff Training: All personnel with access to Personal Data receive regular data protection training and are bound by confidentiality obligations.

While Bosku33 takes all reasonable precautions to secure your Personal Data, no internet-based system is entirely immune to risk. In the event of a data breach that poses a risk to your rights and freedoms, Bosku33 will notify affected players promptly and take all appropriate remedial action.

Bosku33 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security, and gather aggregate analytics data that helps us improve our Services.

10.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the platform to function correctly — including session authentication, security tokens, and load balancing. These cookies cannot be disabled without impairing platform functionality.
• Performance and Analytics Cookies: Used to collect anonymised data about how players interact with the platform, which pages are most visited, and where technical errors occur. This data is used solely for platform improvement.
• Functional Cookies: Used to remember your preferences, such as language settings, display preferences, and last-visited game category, to personalise your experience.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorised login attempts, and suspicious session behaviour.

10.2 Managing Your Cookie Preferences

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the Bosku33 platform. Most modern browsers allow you to review, delete, or block cookies through their privacy or settings menus. Bosku33 does not use cookies to track your activity outside of our own platform.

Subject to applicable law, including the Malaysian Personal Data Protection Act 2010 (PDPA), you are entitled to exercise the following rights in respect of your Personal Data held by Bosku33:

• Right of Access: You have the right to request a copy of the Personal Data we hold about you, together with information about how it is processed.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete Personal Data. You may update basic account information directly through your account settings.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under AML and regulatory requirements.
• Right to Restrict Processing: You may request that we restrict the processing of your Personal Data in certain circumstances — for example, while a correction request is being assessed.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Right to Object: You have the right to object to processing of your Personal Data for direct marketing purposes. We will cease such processing promptly upon receipt of a valid objection.

To exercise any of the above rights, please contact our Data Protection team via live chat or email at [email protected] (plain text only). We will acknowledge your request within seventy-two (72) hours and respond substantively within thirty (30) days.

In the course of delivering our Services, Bosku33 may transfer your Personal Data to service providers and processors located in countries outside of Malaysia. Where such transfers occur, Bosku33 ensures that appropriate safeguards are in place to maintain the equivalent level of data protection required under the PDPA, including:

• Execution of standard contractual clauses or data processing agreements with all international processors.
• Restricting international transfers to jurisdictions that maintain adequate data protection standards.
• Applying technical and organisational security measures that are at minimum equivalent to those applied to data processed within Malaysia.

Your Personal Data will not be transferred to any country for the primary purpose of circumventing Malaysian data protection law.

The Bosku33 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain Personal Data from individuals under the age of 21. Registration by or on behalf of minors is expressly prohibited under our Terms and Conditions.

Where Bosku33 becomes aware that Personal Data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete or anonymise the associated data, and take appropriate action in accordance with our regulatory obligations. If you believe that we have inadvertently collected data from an underage individual, please contact us immediately at [email protected].

Bosku33 reserves the right to update, revise, or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legislation, or operational requirements. The "Last Updated" date displayed at the top of this page will be revised accordingly whenever material changes are made.

Where amendments are material — meaning they meaningfully affect how your Personal Data is processed or your rights in relation to it — registered players will be notified via email or platform notification at least fourteen (14) days prior to the effective date of the change.

Your continued use of the Bosku33 platform after the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the amendments, you may exercise your right to close your account in accordance with our Terms and Conditions.

If you have any questions, concerns, or requests regarding this Privacy Policy, or if you wish to exercise any of your data protection rights, please contact the Bosku33 Data Protection team using the details below:

• Live Chat: Available 24 hours a day, 7 days a week, directly through the Bosku33 platform. This is the fastest channel for privacy-related queries, with an average response time of under 2 minutes.
• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in your subject line for priority routing. Substantive responses are provided within 30 calendar days.
• Support Languages: Our team can assist you in English and Bahasa Malaysia.

When submitting a privacy-related request, please provide your registered account username and a description of your request or concern. For data subject rights requests, identity verification will be required before your request can be processed.