boss8055 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by boss8055 ("the Company", "we", "us", "our") and applies to all personal data collected through the boss8055 platform, including the website at boss8055.win, associated mobile interfaces, and any customer support or communications channels operated by the Company (collectively, the "Platform").

By registering an account, accessing the Platform, or otherwise providing personal information to us, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree to the terms of this Policy, please do not use the Platform.

This Policy should be read in conjunction with the boss8055 Terms & Conditions, which also form part of the agreement between you and the Company.

2. Personal Data We Collect

2.1 Information You Provide Directly

When you register for a boss8055 account, use the Platform's services, or contact our support team, we may collect the following categories of personal data:

• Identity Data: Full legal name, date of birth, government-issued identification number (for KYC verification purposes), nationality.
• Contact Data: Email address, telephone number.
• Financial Data: Bank account details, e-wallet identifiers (e.g., Touch n Go eWallet, Boost), deposit and withdrawal transaction history, MYR wallet balance records.
• Account Data: Username, encrypted password, account preferences, responsible gaming settings (deposit limits, self-exclusion status).
• Communications Data: Content of live chat sessions, email correspondence, and support ticket exchanges with the boss8055 team.
• KYC Documentation: Copies of identity documents (e.g., MyKad, passport, utility bills) submitted for age and identity verification.

2.2 Information Collected Automatically

When you access or use the Platform, we automatically collect certain technical and usage data, including:

• Device & Technical Data: IP address, device type and model, operating system, browser type and version, screen resolution.
• Usage Data: Pages visited, games played, time spent on each section, bet history, bonus interactions, login timestamps and session durations.
• Location Data: General geographic location derived from your IP address (country and city level; precise GPS location is not collected).
• Cookie Data: Persistent and session cookies, pixel tags, and similar tracking technologies as described in Section 6.

2.3 Information from Third Parties

We may receive personal data about you from third-party sources, including payment processors (for transaction verification), identity verification service providers (for KYC purposes), fraud prevention databases, and analytics partners. All such data is handled in accordance with this Policy.

3. How We Use Your Personal Data

boss8055 uses the personal data we collect for the following purposes:

Purpose	Data Categories Used
Account registration and management	Identity, Contact, Account Data
Processing deposits and withdrawals	Financial, Identity Data
Age and identity verification (KYC)	Identity Data, KYC Documentation
Fraud prevention and platform security	Device, Usage, Financial, Identity Data
Customer support and complaint handling	Communications, Identity, Account Data
Regulatory compliance and audit	All categories as required
Responsible gaming monitoring	Usage, Account, Financial Data
Platform improvement and analytics	Device, Usage, Cookie Data (aggregated)
Marketing communications (where consented)	Contact, Usage, Account Data

boss8055 does not sell personal data to third parties. We do not use your personal data for purposes incompatible with those listed above without first obtaining your consent or establishing a separate lawful basis.

4. Legal Basis for Processing

The Company processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you accept when registering for a boss8055 account (e.g., processing deposits, settling bets, maintaining your MYR wallet).
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) requirements and KYC obligations imposed by our international gaming licence conditions.
• Legitimate Interests: Processing that serves our legitimate business interests — such as fraud prevention, platform security, responsible gaming monitoring, and business analytics — provided these interests are not overridden by your rights and interests.
• Consent: Where we rely on your consent (e.g., for direct marketing communications), you may withdraw that consent at any time by contacting our support team or updating your communication preferences in your account settings.

5. Sharing of Personal Data

boss8055 does not sell, rent, or trade personal data with third parties for their own marketing purposes. We may disclose personal data to the following categories of recipients in the course of our normal operations:

• Payment Processors: Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other financial institutions engaged to process your MYR deposits and withdrawals. These entities receive only the data necessary to complete the specific transaction.
• Identity Verification Providers: Third-party KYC service providers engaged to verify your identity and age as required under our licence conditions.
• Fraud Prevention Services: Specialist third parties providing fraud detection, risk scoring, and responsible gaming screening services.
• Game Content Providers: Licensed game studios and live dealer operators whose products are hosted on the Platform may receive anonymised session data for technical and licensing purposes.
• IT and Infrastructure Partners: Hosting, security, and platform maintenance providers operating under binding data processing agreements.
• Regulatory Authorities: Where required by applicable law, court order, or regulatory demand, boss8055 may disclose personal data to competent authorities.

All third parties with whom we share personal data are required to maintain appropriate security standards and to use that data only for the specific purpose for which it was disclosed.

6. Cookies and Tracking Technologies

6.1 What We Use

The boss8055 Platform uses cookies and similar tracking technologies (including pixel tags and local storage objects) to deliver and improve the service. These fall into the following categories:

• Strictly Necessary Cookies: Required for the Platform to function — including session authentication, security tokens, and load balancing. Cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, display options, and responsible gaming configurations.
• Analytics Cookies: Collect aggregated data about how users navigate and interact with the Platform, used to identify usability improvements. Data is processed in anonymised form where possible.
• Security Cookies: Used to detect and prevent fraudulent login attempts and unusual account activity patterns.

6.2 Managing Cookies

You may manage non-essential cookies through your browser settings. Note that disabling cookies may affect Platform functionality, including your ability to stay logged in to your boss8055 account. Instructions for managing cookies are available in the help documentation for all major browsers.

7. Data Retention

boss8055 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. As a general guide:

• Account data and transaction records are retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC documentation is retained for the duration of the account relationship plus five (5) years.
• Customer support communications are retained for three (3) years from the date of the last interaction.
• Technical and usage logs are retained for twelve (12) months on an active basis and archived for a further twelve (12) months before deletion.
• Marketing consent records are retained until consent is withdrawn and for a period thereafter to demonstrate compliance.

Where personal data is no longer required, it is securely deleted or anonymised in accordance with our data destruction procedures.

8. Data Security

boss8055 implements appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, and destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your browser and our servers.
• Encrypted storage of sensitive data, including passwords (one-way hashed) and financial account details.
• Access controls limiting personal data access to authorised personnel on a need-to-know basis.
• Regular security assessments and penetration testing of the Platform infrastructure.
• Incident response procedures to detect, report, and address personal data breaches.

While we take security seriously, no internet-based system can guarantee absolute security. You are responsible for keeping your boss8055 login credentials confidential and for notifying us immediately if you suspect unauthorised access to your account.

9. Your Rights Over Your Personal Data

Subject to applicable law, you have the following rights with respect to the personal data boss8055 holds about you:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where we have no continuing lawful basis to retain it, subject to our legal record-keeping obligations.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our support team via 24/7 live chat or email as detailed in Section 13. We will respond within thirty (30) days of receiving a valid request.

10. Children's Privacy

The boss8055 Platform is strictly for individuals aged 21 and above. We do not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from an underage individual, that data will be promptly deleted and the associated account will be closed. If you believe that a minor has registered on the Platform, please contact our support team immediately.

11. International Data Transfers

boss8055 operates as an international platform. Your personal data may be transferred to, stored, or processed in countries outside of Malaysia. Where such transfers occur, we ensure that appropriate safeguards are in place — such as contractual clauses that impose data protection obligations on the receiving party — to protect your information in accordance with standards comparable to those described in this Policy.

By using the Platform, you consent to the transfer of your personal data to servers and infrastructure located outside Malaysia where necessary for the delivery of our services.

12. Changes to This Privacy Policy

boss8055 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will notify registered users via email or an in-platform notification prior to the change taking effect. The "Last Updated" date at the top of this page will always reflect the most recent revision. Your continued use of the Platform after a revised Policy has been published constitutes acceptance of the updated terms.

13. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or want to raise a data protection concern, please contact the boss8055 data team using the details below. All privacy-related enquiries are handled confidentially.