Privacy Policy bos96 – Your Personal Data Protection

Bos96 ("we", "Platform", or "bos96") values the privacy of every individual who uses our platform. This Privacy Policy explains how we collect, use, store, and protect your personal information when you register, log in, or use any service offered at bos96.onl.

This document applies to all registered members, website visitors, and any individual who interacts with our platform via a web browser or the bos96 mobile app. We encourage you to read this policy together with Terms and Conditions us for a comprehensive overview of how we operate.

If you have any questions about this privacy policy or how we handle your data, the bos96 support team is available anytime via live chat on the platform.

Bos96 collects various types of information depending on how you interact with our platform. Below is a summary of the data categories we collect:

We only collect data that is strictly necessary for the stated purposes. We do not collect sensitive information such as medical records, religious beliefs, or political views.

Collected data is used solely for legitimate and necessary purposes to ensure the smooth operation of the bos96 platform. Primary uses include:

• Account management: Creating, verifying, and maintaining your member account, including password recovery and profile updates.
• Transaction processing: Processing deposits, withdrawals, and all financial activities accurately and securely in accordance with your chosen payment method.
• Identity verification: Carrying out KYC (Know Your Customer) procedures and compliance with anti-money laundering (AML) legal requirements.
• Platform security: Detecting and preventing fraudulent activity, hacking, or account misuse using real-time monitoring systems.
• Product improvement: Analysing aggregated usage patterns to improve platform features, speed, and overall user experience.
• Service communications: Sending important notices related to your account, policy changes, or security information that requires your attention.
• Responsible gaming: Monitoring gaming patterns to identify potential issues and provide appropriate self-management tools.
• Customer Support: Resolving enquiries, complaints, and disputes more quickly and effectively using records of previous interactions.

Bos96 does not sell or rent your personal data to anyone. However, there are limited situations where we need to share data with certain parties to keep the platform operating effectively:

• Payment providers: Required transaction information is shared with payment processors and banking institutions for the purpose of processing deposits and withdrawals.
• Identity verification providers: KYC data is shared with trusted third-party verification services to confirm the authenticity of submitted documents.
• Technical service providers: Server infrastructure, cybersecurity, and analytics are managed by technical partners bound by strict confidentiality agreements.
• Legal requirements: Information may be disclosed to the relevant authorities if required by court order, applicable law, or a legitimate official investigation.

All third parties who receive your data are bound by strict data protection agreements and are only permitted to use the information for the specified purposes. They are not allowed to use your data for their own purposes.

Protecting your personal data is bos96's highest priority. We implement multiple layers of technical and organisational security to prevent unauthorised access, loss, or misuse of data:

• End-to-end encryption: All communications between your device and our servers are secured using TLS 1.3 protocol with 256-bit encryption.
• Two-factor authentication (2FA): Members are encouraged to enable 2FA to add an extra layer of security to their account beyond the standard password.
• Continuous monitoring: An intrusion detection system and suspicious activity monitoring operate around the clock to identify and respond to threats in real time.
• Regular security audits: The bos96 platform undergoes regular penetration testing and independent security audits to identify and address any vulnerabilities.
• Hashed passwords: Passwords are stored in hashed format using modern algorithms — we ourselves cannot read your password in its original form.
• Staff training: All staff who handle personal data undergo data protection training and are bound by legally enforceable confidentiality agreements.

While we take all reasonable precautions, no system is truly 100% impenetrable. In the event of a security incident involving your data, we will notify you within the timeframe required by applicable law.

Bos96 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform's core functions operate smoothly. The following are the types of cookies we use:

• Essential cookies: Required for core platform functions such as login, session management, and security. Cannot be disabled without affecting platform functionality.
• Performance cookies: Collecting information about how you use the platform (e.g., most frequently visited pages) to help us improve the user experience.
• Functional cookies: Remembering your preferences such as language settings, theme, and display options so you don't have to reset them every time you log in.
• Analytics cookies: Used to understand overall usage patterns in aggregated form that does not identify you as an individual.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality of the bos96 platform and your overall gaming experience.

In the course of its operations, bos96 may transfer your personal data to servers located outside Malaysia. Such transfers are carried out solely for legitimate operational purposes, including backup storage, international payment processing, or the use of cloud infrastructure.

All cross-border data transfers are carried out with adequate safeguards, including the use of approved standard contractual clauses and ensuring that recipient parties maintain a level of data protection equivalent to or higher than Malaysia's standards.

By using the bos96 platform, you consent to this data transfer as part of our normal operational requirements. If you have concerns about data transfers, please contact our support team for more information.

As a bos96 member and data subject, you have the following rights regarding your personal information:

To exercise any of the above rights, contact the bos96 support team via live chat. We will process your request within 14 business days. In complex cases, this period may be extended to 30 days with prior notice to you.

The bos96 platform is exclusively for individuals aged 18 and above only. We do not knowingly collect or process personal data from children under the age of 18.

If we discover that a child's personal data has been collected without our knowledge — for example, if a child registered using false information — we will take immediate action to delete that data and close the account.

If you are a parent or guardian and believe your child has registered on our platform without permission, please contact us immediately so we can take appropriate action without delay.

Bos96 retains your personal data only for as long as necessary for the stated purposes or as required by applicable law:

• Active account data: Retained for as long as your account is active and for a reasonable period after inactivity for audit purposes.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date in accordance with accounting and anti-money laundering legal requirements.
• KYC documents: Retained for a minimum of 5 years after the business relationship ends, or longer if required by the relevant authorities.
• Communication logs: Customer support interaction records are retained for 3 years for reference and dispute resolution purposes.
• Cookie data: Depends on the cookie type; session cookies are deleted when the browser is closed, while persistent cookies have a set expiry date.

When data is no longer needed and there is no legal obligation to retain it, we will delete or anonymise it in a secure and irreversible manner.

Bos96 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological advancements. All amendments will be posted on this page with an updated date.

For material amendments — meaning changes that significantly affect how we use or protect your data — we will notify members via registered email or an in-platform notice at least 7 days before the changes take effect.

Your continued use of the bos96 platform after any amendment takes effect will be deemed as your acceptance of the updated policy. If you do not agree with the changes made, you have the right to close your account in accordance with the established procedure.

If you have any questions, concerns, or complaints regarding how we handle your personal data, we encourage you to contact us directly. Our data privacy team will respond within two business days.

You may also refer to the FAQ us for answers to frequently asked questions, or visit the Responsible Gaming to learn more about the responsible gaming tools we provide.