Privacy Policy BOS99 –
Protection of Your Personal Data

01 Introduction and Scope of This Policy

Bos99 ("Platform", "we") cares about the privacy of every individual who uses our services at bos99.vin. This Privacy Policy is designed to ensure you fully understand how your personal data is managed from the moment you register through to after your account is closed.

This policy applies to all users of the bos99 platform, including unregistered website visitors, active registered members, and former members whose accounts have been closed. Every interaction you have with the bos99 platform — whether through the website, mobile app, or customer support channels — is subject to this policy.

We operate in accordance with the data protection principles set out in Malaysia's Personal Data Protection Act 2010 (PDPA). This means we only process your personal data on a valid legal basis, whether that is your consent, contractual necessity, a legal obligation, or our legitimate interests as a platform operator.

02 Types of Personal Data We Collect

Bos99 only collects data that is genuinely necessary to provide a safe, seamless, and responsible service. The following are the main categories of data we collect:

We do not collect sensitive data categories such as medical information, political views, religious beliefs, or sexual orientation. All data collected is limited to what is necessary to operate a legitimate online gaming platform.

03 How We Use Your Personal Data

Every piece of data we collect is used for a clear and lawful purpose. bos99 processes your personal data for the following purposes:

• Account management: Creating, verifying and maintaining your member account, including the KYC identity verification process required by law.
• Transaction processing: Managing deposits, withdrawals, bonus payments and all financial activities related to your bos99 account.
• Security and fraud prevention: Detecting and preventing unauthorised access, fraud, money laundering and other breaches of terms.
• Customer support: Resolving enquiries, complaints and technical issues submitted through bos99's various support channels.
• Legal compliance: Fulfilling reporting obligations to relevant authorities in accordance with applicable AML, CFT and PDPA legislation.
• Platform improvement: Analysing aggregated usage patterns to improve user experience, platform performance and the range of games offered.
• Marketing communications: Sending promotional information, bonuses and exclusive offers — only to members who have consented to receive such communications.
• Responsible gaming: Monitoring gameplay patterns to identify members who may need self-management support or game limits.

Bos99 will not process your personal data for any purpose not stated above without first obtaining your renewed consent.

04 Data Sharing and Disclosure

Bos99 does not sell or rent members' personal data to any third party for marketing purposes. However, in the course of operating the platform, we may share data with selected parties as follows:

• Payment service providers: Financial institutions, banks, and e-wallet providers that handle your deposit and withdrawal transactions — only data necessary to process the relevant transaction is shared.
• Game software providers: Licensed gaming companies that provide casino, slot, and other game content on the bos99 platform — minimal, non-personally identifiable usage data only.
• Cloud service providers: Data storage and processing platforms used for bos99 platform operations — all such providers are bound by strict data protection agreements.
• Legal authorities: Law enforcement agencies, regulatory bodies or courts when required by Malaysian law or a valid court order.
• Group companies: bos99 affiliated entities that assist in service delivery, subject to strict internal confidentiality agreements.

05 Data Security and Protection Measures

Bos99 continuously invests in cybersecurity infrastructure to ensure members' personal data is always protected against both external and internal threats. The key security measures we practise include:

• 256-bit SSL encryption: All communications between your device and bos99 servers are encrypted using the latest TLS protocols, preventing any third party from intercepting data in transit.
• Stored data encryption: Sensitive data such as financial information and identity documents are stored in encrypted format within databases that are not directly accessible from the internet.
• Tiered access control: Only specifically authorised bos99 staff may access members' personal data, and every access is logged for audit purposes.
• Two-factor authentication (2FA): bos99's internal systems use multi-factor authentication to prevent unauthorised access even if a password is compromised.
• Periodic vulnerability scanning: The bos99 platform undergoes regular penetration testing and security scanning by independent security teams.
• 24/7 Monitoring: Automated monitoring systems operate around the clock to detect suspicious activity and respond immediately.

While we take all reasonable precautions, no security system is 100% impenetrable. You also play an important role in keeping your account secure by using a strong password and never sharing your login credentials with anyone.

06 Use of Cookies and Tracking Technology

Bos99 uses cookies and similar tracking technologies to enhance the user experience and analyse platform performance. Cookies are small text files stored on your device when you visit bos99.vin.

Types of cookies we use:

• Essential cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collecting information on how you use the platform — pages visited, time spent and links clicked — to help us improve user experience.
• Functional cookies: Remembering your preferences and settings such as preferred language, region and display choices to provide a more personalised experience.
• Analytics cookies: Used to understand overall usage patterns for platform improvement purposes — this data is processed in aggregate and does not personally identify you.

You can manage or disable cookies through your web browser settings at any time. However, disabling essential cookies may affect the functionality of certain parts of the bos99 platform.

07 Your Rights Regarding Personal Data

As a bos99 member and a data subject under Malaysia's PDPA, you have the following rights regarding the personal information we hold about you:

• Right of access: You have the right to request a copy of the personal data we hold about you at any time.
• Right to rectification: If the data we hold is inaccurate or outdated, you have the right to request that we correct it promptly.
• Right to erasure: Under certain circumstances, you may request that we delete your personal data — subject to legal record-keeping obligations we are required to comply with.
• Right to restriction of processing: You may request that we restrict the processing of your data in certain situations, such as when you are disputing the accuracy of the data.
• Right to object: You may object to the processing of your data for direct marketing purposes at any time.
• Right to data portability: You may request that we provide your personal data in a machine-readable format for transfer to another platform.

To submit any request relating to your data rights, contact the bos99 support team via live chat or our official email. We will process your request within 30 days of receipt.

08 Data Retention Period

Bos99 retains your personal data for as long as necessary to fulfil the original purpose of collection and to comply with applicable legal obligations. The following are the general data retention guidelines we practise:

• Active account data: Retained for the duration that your account remains active on the bos99 platform.
• Financial transaction data: Retained for a minimum of 7 years following a transaction, in accordance with Malaysian financial and AML legal requirements.
• KYC and identity records: Retained for 5 years following account closure or the period stipulated by regulatory authorities.
• Support communication logs: Retained for 2 years for reference and dispute resolution purposes.
• Aggregated analytics data: May be retained for a longer period as this data cannot be used to personally identify you.

Once the designated retention period has ended, your personal data will be securely deleted or anonymised so it can no longer be linked to your identity.

09 Children's and Minors' Privacy

The bos99 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from children or individuals under the age of 18.

If we discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. Parents or guardians who find that their child has registered on the bos99 platform without permission are encouraged to contact our support team right away.

10 Amendments to This Privacy Policy

Bos99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our operational practices, legal requirements, or technological developments. Any significant amendments will be communicated to members via an in-platform notice or email to the registered address.

The "Updated" date shown at the top of this document will be revised each time changes are made. Your continued use of the bos99 platform after any amendment is published constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this page periodically to stay informed about how we protect your privacy. If you disagree with any amendments, you may stop using the platform and request account closure at any time.

11 How to Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the bos99 Data Protection Officer (DPO) team is ready to assist you.

You can reach us through the following methods:

• Live chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom-right corner of the bos99 platform.
• Official email: Send a detailed inquiry to our privacy team at [email protected] — we aim to respond within 2 business days.
• FAQ Page: Visit FAQ page bos99 for answers to frequently asked questions about privacy and account security.