🔒 bosku8 Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") is published by bosku8 ("bosku8," "we," "us," "our") and applies to all personal data collected through the bosku8 website, mobile platform, and any associated services (collectively, the "Platform"). bosku8 is the data controller responsible for personal data processed under this Policy.

This Policy applies to all current and prospective users of the bosku8 Platform, including registered account holders, visitors who have not created an account, and individuals who contact us by any means. It should be read in conjunction with our Terms & Conditions.

By accessing or using the bosku8 Platform, you acknowledge that you have read and understood this Policy. If you do not agree with the practices described herein, you should not use the Platform. The bosku8 Platform is not directed at persons under the age of 21 and we do not knowingly collect personal data from minors.

2. Data We Collect

bosku8 collects personal data through several means, including directly from you during registration and account use, automatically through your interaction with the Platform, and from third parties engaged in connection with our services. The categories of personal data we collect include:

2.1 Registration & Identity Data

• Full legal name as appearing on your Malaysian Identity Card (MyKad) or passport;
• Date of birth (required to verify you are 21 or above);
• Malaysian mobile number used as your primary account identifier;
• Chosen username and password (password is stored in hashed form only);
• Residential address in Malaysia (required for KYC verification).

2.2 Verification (KYC) Documents

• Copy of Malaysian Identity Card (MyKad) or valid passport;
• Proof of residential address (e.g., utility bill, bank statement);
• Proof of payment method ownership (e.g., Touch n Go eWallet screenshot, bank account confirmation);
• Source of funds documentation where required by applicable anti-money laundering regulations.

2.3 Financial Transaction Data

• Deposit amounts, dates, and payment method references (e.g., Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank);
• Withdrawal requests, destination account details, and processing records;
• Transaction history and wallet balance records;
• USDT TRC20 wallet addresses where cryptocurrency deposits are used.

2.4 Gaming Activity Data

• Game session logs including game titles played, wager amounts, outcomes, and timestamps;
• Sportsbook bet selections, odds accepted, and settlement records;
• Lottery ticket purchases and draw participation records;
• Bonus claims, wagering progression, and promotion participation history.

2.5 Technical & Device Data

• IP address and geolocation data at the time of login and transaction;
• Device type, operating system, and browser version;
• Session duration, page interaction patterns, and navigation logs;
• Cookie identifiers and similar tracking technologies (see Section 6).

2.6 Communication Data

• Contents of live chat conversations, support tickets, and email correspondence with bosku8;
• Records of responsible gaming requests (self-exclusion, deposit limit changes, cooling-off periods);
• Complaint and dispute records.

3. How We Use Your Data

bosku8 uses the personal data we collect for the following purposes:

4. Legal Basis for Processing

bosku8 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to create and operate your account, process transactions, and deliver gaming services under our Terms & Conditions;
• Legal Obligation: Processing required to comply with applicable anti-money laundering laws, gaming authority regulations, tax obligations, and law enforcement requests;
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improving the Platform — where such interests are not overridden by your fundamental rights;
• Consent: Processing for marketing communications, where you have specifically opted in. You may withdraw consent at any time by contacting support.

5. Data Sharing & Disclosure

bosku8 does not sell, rent, or trade personal data. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment processors: Touch n Go eWallet, Boost, GrabPay, 7-Eleven Cliqq, Malaysian banking partners, and USDT processing services — solely to process financial transactions;
• KYC and identity verification service providers: Third-party services engaged to verify identity documents and conduct AML screening;
• Game content providers: Licensed game studios and live casino platform providers who receive session data necessary to deliver gameplay;
• IT and infrastructure service providers: Cloud hosting, security monitoring, and software services used to operate the Platform;
• Customer support platforms: Live chat and ticketing services used to deliver support;
• Regulatory and law enforcement authorities: Where disclosure is required by applicable law, court order, or gaming authority request;
• Fraud prevention networks: Shared fraud intelligence services used to protect the Platform and its users.

All third-party service providers are required to process personal data only for the stated purposes and are subject to appropriate contractual data processing obligations consistent with this Policy.

6. Cookies & Tracking Technologies

bosku8 uses cookies and similar technologies to operate the Platform, remember your preferences, analyse usage patterns, and maintain account session security. The principal categories of cookies used are:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without preventing Platform access.
• Functional Cookies: Remember your language preferences, remembered login details (if "Remember Me" is selected), and display preferences.
• Analytics Cookies: Collect anonymised data about how users interact with the Platform — pages visited, session duration, navigation paths — to enable Platform improvements. No personally identifiable information is contained in analytics data.
• Security Cookies: Used for fraud detection, bot identification, and account security verification.

You may manage non-essential cookies through your browser settings. Note that disabling cookies may limit your ability to access certain features of the bosku8 Platform. Clearing cookies will end your active session and require you to log in again.

7. Data Retention

bosku8 retains personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods required by law and regulatory obligations:

• Account and identity data: Retained for a minimum of five (5) years following account closure, in compliance with applicable anti-money laundering legislation;
• Financial transaction records: Retained for a minimum of seven (7) years for tax and financial regulatory compliance purposes;
• Gaming activity logs: Retained for a minimum of five (5) years from the date of each session;
• KYC verification documents: Retained for five (5) years following account closure or the date of last transaction;
• Support and communication records: Retained for three (3) years following resolution of the relevant query;
• Self-exclusion records: Retained indefinitely to prevent re-registration during an active self-exclusion period.

On expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised.

8. Data Security

bosku8 implements technical and organisational security measures proportionate to the risks associated with processing personal data in the online gaming context. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• AES-256 encryption for sensitive data at rest, including KYC documents and payment references;
• Password hashing using bcrypt with per-user salting — plaintext passwords are never stored;
• Two-factor authentication (OTP via SMS) available and encouraged for all bosku8 account holders;
• Role-based access controls ensuring staff can only access data necessary for their specific function;
• Regular penetration testing and security audits conducted by independent security professionals;
• Automated anomaly detection systems monitoring for unusual login patterns and transaction behaviour.

Despite these measures, no digital platform can guarantee absolute security. In the event of a data breach materially affecting your personal data, bosku8 will notify affected users and relevant authorities in accordance with applicable law.

9. International Data Transfers

bosku8 may transfer your personal data to servers or service providers located outside Malaysia, including in jurisdictions where data protection laws may differ from those in Malaysia. Where such transfers occur, bosku8 ensures that appropriate safeguards are in place, including:

• Standard contractual clauses binding the recipient to processing standards equivalent to this Policy;
• Transfer only to jurisdictions recognised as providing an adequate level of data protection under applicable international frameworks;
• Data processing agreements with all third-party service providers receiving transferred data.

10. Your Rights

Subject to applicable law and the legitimate interests of bosku8 in maintaining gaming integrity and complying with regulatory obligations, you have the following rights in relation to your personal data held by bosku8:

• Right of Access: Request a copy of the personal data bosku8 holds about you;
• Right to Rectification: Request correction of inaccurate or incomplete personal data;
• Right to Erasure: Request deletion of your personal data, subject to legal retention obligations;
• Right to Restriction: Request that processing of your data be limited in certain circumstances;
• Right to Object: Object to processing of your data based on legitimate interests, including direct marketing;
• Right to Data Portability: Request your data in a structured, machine-readable format where processing is based on consent or contract;
• Right to Withdraw Consent: Where processing is based on your consent, withdraw that consent at any time without affecting prior processing.

To exercise any of these rights, please contact bosku8 customer support. We will respond to all verifiable requests within thirty (30) calendar days. Requests may require identity verification before we can process them.

11. Children & Minors

The bosku8 Platform is strictly intended for persons aged 21 years and above. bosku8 does not knowingly collect, process, or retain personal data relating to persons under 21 years of age. If we become aware that personal data has been submitted by or on behalf of a person under 21, we will immediately suspend the relevant account and delete the associated personal data.

If you believe that a person under 21 has accessed the bosku8 Platform using your account credentials or by misrepresenting their age during registration, please contact our support team immediately. Parents and guardians who are concerned about underage access to online gaming services are encouraged to use parental control software to restrict access to gambling websites.

12. Marketing Communications

bosku8 may send marketing communications — including information about promotions, new games, sportsbook events, and bonus offers — to registered users who have opted in to receive such communications. Opt-in consent is obtained during account registration and can be withdrawn at any time.

bosku8 will never send unsolicited commercial communications to persons who have not opted in. bosku8 will never send marketing communications to users who have self-excluded from the Platform — self-exclusion automatically removes the user from all marketing lists with immediate effect.

To opt out of marketing communications, update your communication preferences in your account settings or contact customer support. Opting out of marketing does not affect transactional communications (e.g., deposit confirmations, withdrawal notifications, account security alerts) which will continue to be sent regardless of marketing preferences.

13. Third-Party Links

The bosku8 Platform may contain links to third-party websites or services, including game provider sites and payment platform information pages. This Privacy Policy applies exclusively to the bosku8 Platform. bosku8 has no control over, and accepts no responsibility for, the privacy practices of any third-party website. We encourage you to review the privacy policies of any third-party site you visit via a link from bosku8.

14. Changes to This Policy

bosku8 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. We will notify registered account holders of material changes via the mobile number or email address on file, or via a prominent notice on the Platform, not less than seven (7) days prior to the changes taking effect where operationally practicable.

The most current version of this Policy, with its effective date, will always be accessible at this URL. Your continued use of the Platform following notification of any changes constitutes acceptance of the revised Policy. If you do not agree with changes to this Policy, you should close your account in accordance with the Terms & Conditions.

15. Contact & Complaints

For any questions regarding this Privacy Policy, to exercise your data rights, or to lodge a complaint about how bosku8 handles your personal data, please contact us:

bosku8 takes all privacy complaints seriously. If you are not satisfied with our response to your complaint, you may have the right to escalate the matter to the relevant data protection authority in the jurisdiction applicable to your complaint. For responsible gaming-related matters, please refer to our Responsible Gaming page.