🔏 Privacy & Data Security
At BossClub, your privacy is not merely a legal obligation – it is a genuine commitment. Learn how we collect, use, and protect your personal data in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010.
Bossclub fully complies with Malaysia's Personal Data Protection Act (PDPA) 2010 in all aspects of member data collection and management.
Bossclub has never sold, rented, or traded members' personal data to any third party for marketing purposes, and never will.
Bossclub members have the full right to access, correct, transfer, or delete their personal data at any time in accordance with the PDPA.
256-bit SSL encryption, 24/7 system monitoring, multi-layered firewalls, and regular security audits protect every bit of bossclub members' personal data.
This Privacy Policy ("Policy") describes how BossClub collects, uses, stores, discloses and protects the personal information you provide to us when registering for or using the platform bossclub.bet. We are committed to handling your personal data responsibly, transparently and securely. By using BossClub's services, you agree to the privacy practices set out in this Policy. Please read this document carefully in its entirety.
BossClub ("we", "platform" or "the Company") is a leading online entertainment platform operator in Malaysia. This Privacy Policy applies to all registered members, website visitors and any individual who interacts with the BossClub platform via bossclub.bet, our mobile app, or our official communication channels.
As a company operating in Malaysia and serving Malaysian users, BossClub fully complies with the Personal Data Protection Act (PDPA) 2010 and all related regulations. We adopt a privacy by design approach – meaning privacy protection is built into our systems and processes from the ground up, not added as an afterthought.
This Privacy Policy should be read in conjunction with BossClub Terms & Conditions and Responsible Gaming Policy us for a complete overview of how the BossClub platform operates.
BossClub only collects personal data that is necessary to provide the services you request and to fulfil our legal obligations. The following are the categories of data we may collect:
| Data Category | Example Information | How It Is Collected |
|---|---|---|
| Identification Data | Full name, MyKad number, date of birth, gender | Registration form, KYC |
| Contact Data | Email address, phone number, residential address | Registration, profile updates |
| Financial Data | Bank account numbers, deposit/withdrawal transaction records via TNG, GrabPay, DuitNow, FPX | Payment transactions |
| Game Data | Betting records, winnings, losses, and games played | Platform activity |
| Technical Data | IP address, device type, web browser, approximate location | Automated system logs |
| Communications Data | Support chat records, emails, complaints | Customer support interactions |
Sensitive Data: BossClub does not collect sensitive data such as health information, religion, political opinions, or biometric data unless specifically required for identity verification and with your explicit consent.
Bossclub only processes your personal data for lawful, necessary purposes that have been made known to you. We do not process your data for any other purpose without first obtaining your renewed consent.
BossClub does not sell, rent or trade members' personal data to any third party for their own marketing purposes. However, under certain limited circumstances, BossClub may share your data with the following parties:
All third parties with whom BossClub shares data are subject to legally binding data processing agreements and are required to protect your data to a standard no less stringent than BossClub's own.
BossClub implements multiple layers of technical and organisational security controls to protect members' personal data against unauthorised access, loss, destruction, or unlawful disclosure.
All data transmitted between your browser and BossClub's servers is encrypted using 256-bit SSL — the same standard used by Malaysia's leading banks.
A multi-layered firewall system protects bossclub's infrastructure against cyberattacks, intrusion attempts, and malicious traffic.
Bossclub's IT security team monitors our systems around the clock to detect any suspicious activity or security breaches.
BossClub conducts regular penetration testing and security audits by independent third-party experts to identify and address any vulnerabilities.
Shared Responsibility: While BossClub takes all reasonable steps to protect your data, security also depends on your own actions. Please ensure your BossClub account password is strong, unique, and not shared with anyone.
The BossClub platform uses cookies and similar tracking technologies to enhance user experience, analyse website traffic, and deliver more relevant content to you.
| Cookie Type | Purpose | Period | Status |
|---|---|---|---|
| Essential Cookies | Session login, account security, and core bossclub platform functionality | Session / 30 days | Mandatory |
| Performance Cookies | Traffic analytics, platform performance monitoring, error detection | 90 days | Preferences |
| Functional Cookies | Saved language preferences, display settings, favourite game selections | 1 year | Preferences |
| Marketing Cookies | Personalised bossclub promotional offers and relevant content | 30 days | Preferences |
You can manage cookie usage through your web browser settings. Please note that disabling essential cookies may affect the functionality of certain BossClub platform features. To manage your cookie preferences, visit the "Settings" section in your BossClub account.
Under Malaysia's Personal Data Protection Act (PDPA) 2010, you as a bossclub member have certain rights regarding your personal data. bossclub respects and facilitates the exercise of all these rights.
You have the right to request a copy of the personal data BossClub holds about you. Such requests will be processed within 21 business days.
If any of your personal data held by bossclub is inaccurate or out of date, you have the right to request an immediate correction.
Under certain circumstances, you may request that BossClub delete your personal data – subject to legal retention obligations.
You have the right to receive your personal data in a structured, machine-readable format for transfer to another operator.
You may object to the processing of your personal data for BossClub's direct marketing purposes at any time, without providing any reason.
In certain circumstances, you may request that BossClub restrict the processing of your personal data while a dispute or enquiry is being resolved.
To exercise any of the above rights, please contact the bossclub Data Protection Officer via email privacy@bossclub.bet or via Live Chat on the platform. BossClub will respond within 14 business days.
BossClub retains your personal data only for as long as necessary to fulfil the purposes set out in this Policy or as required by applicable Malaysian law.
Once the relevant retention period has expired, your personal data will be securely deleted or permanently anonymised so that it can no longer be linked to you.
The BossClub platform is strictly for adult users aged 18 and above. BossClub does not knowingly collect personal data from individuals under the age of 18.
Child Protection: Should we become aware that personal data has been collected from someone under the age of 18 without proper age verification, bossclub will take immediate steps to delete that data and close the account in question. Parents or guardians who discover that their child has registered with bossclub should contact us immediately at privacy@bossclub.bet.
BossClub employs multiple age verification measures during the registration process to ensure our platform is only accessed by eligible users. However, we encourage parents and guardians to monitor their children's internet usage.
In the course of operating the BossClub platform, your personal data may need to be transferred to or processed outside Malaysia – for example, for cloud hosting services or international gaming software providers.
Bossclub reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or technological developments. We are committed to notifying you of any significant changes.
Bossclub has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with this Privacy Policy and addressing all privacy-related enquiries from members.
For formal privacy complaints, please email us with the subject line "Privacy Complaint – [Your BossClub Account Number]". We will acknowledge receipt within two business days and aim to resolve your complaint within 21 business days. If you are unsatisfied with our response, you have the right to refer your complaint to the Department of Personal Data Protection Malaysia.
This bossclub Privacy Policy (Version 3.1) takes effect on 1 January 2026 and supersedes all previous versions. This document should be read together with Terms & Conditions and Responsible Gaming Policy BossClub for a full understanding of your rights and responsibilities as a member of our platform.
Privacy is more than a document – it is a core part of how we work at bossclub
Every data handling process at BossClub is designed to fully comply with the Malaysian Personal Data Protection Act 2010. We are audited on a regular basis to ensure ongoing compliance.
Privacy protection is built into every BossClub system and process from the ground up — not bolted on after the fact as a compliance checkbox.
BossClub only collects data that is genuinely necessary to deliver the services you request. Excessive or unnecessary data collection is not a practice at BossClub.
BossClub has a dedicated Data Protection Officer (DPO) appointed to ensure privacy compliance and to serve as the primary point of contact for all personal data-related enquiries.
All BossClub staff undergo regular data protection training to ensure they understand and comply with their privacy responsibilities in their day-to-day work.
BossClub has an established and tested data breach incident response procedure. In the event of a breach, members and relevant authorities will be notified within the timeframes required by law.
Your Data Is Safe with Us
Over two million Malaysian members trust bossclub with their personal data. Register today and enjoy a safe, fair, and entertaining gaming experience with your privacy fully protected.