Privacy Policy bos67 – Your Personal Data Protection in Malaysia

This Privacy Policy explains how bos67 ("we", "platform", "Company") collects, uses, stores, discloses and protects your personal data when you use the bos67 platform at bos67.best. This document applies to all registered users and visitors of the bos67 platform, regardless of the access method used – whether via a desktop web browser, mobile app, or any other device.

Bos67 is a data controller as defined under Malaysia's Personal Data Protection Act 2010 (PDPA). This means we bear full responsibility for ensuring that the personal data we collect and process is managed in a manner that complies with all applicable legal requirements and respects your right to privacy as an individual.

Bos67 collects your personal data through the following methods:

Directly from you: When you register a bos67 account, you provide basic information such as your full name, date of birth, email address, phone number, and Malaysian identification number. During the identity verification (KYC) process, you may be asked to upload a copy of a valid identity document. When you make a deposit or withdrawal using Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Boost, or ShopeePay, the relevant transaction information is collected and stored by the bos67 system.

Automatically when you use the platform: bos67 automatically collects technical information when you access the platform, including your IP address, web browser type and version, operating system, pages visited, time spent on each page, links clicked, and other usage data that helps us understand how players interact with the bos67 platform.

From legitimate third-party sources: In certain cases, bos67 may receive information about you from third-party identity verification service providers, financial institutions for AML/KYC compliance purposes, or through legitimate affiliate programmes. All such information sharing is carried out within the bounds of applicable law.

Bos67 uses your personal data solely for legitimate, relevant and necessary purposes. The following are the primary purposes for which bos67 uses your data:

• Account management: Creating, maintaining, and managing your bos67 account, including processing deposits, withdrawals, and account balance management.
• Identity verification: Verifying that you meet the minimum age requirement of 18 years and confirming your identity in line with legal compliance requirements.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, account breaches, and any activity that violates bos67 platform rules.
• Customer support: Processing and responding to your enquiries, complaints, and requests via Live Chat, WhatsApp, or email.
• Platform improvement: Analyzing usage patterns to improve the functionality, design, and overall experience of the bos67 platform.
• Service communications: Sending important notifications related to your account, such as transaction confirmations, security alerts, and policy updates.
• Marketing communications: Sending you information about bos67 promotions, bonuses and offers that may be of interest to you – subject to your consent, which may be withdrawn at any time.
• Legal compliance: Fulfilling the legal obligations imposed on bos67, including the retention of financial records and cooperation with relevant authorities when required by law.

Bos67 does not sell, rent or trade your personal data to third parties for their own commercial purposes. However, there are limited circumstances in which bos67 needs to share your data with certain parties to enable the platform to operate effectively and comply with the law:

• Payment service providers: Transaction information is shared with payment providers such as Touch 'n Go, GrabPay, DuitNow, FPX and banking institutions to process your deposits and withdrawals.
• Game software providers: Licensed game providers such as Pragmatic Play, Evolution, and others may receive the minimum session data required to deliver gaming services to you.
• Technical service providers: Companies that assist bos67 with server hosting, cybersecurity, platform analytics and technical support – all subject to strict confidentiality agreements.
• Identity verification agency: Third-party KYC services used to verify player identity and age in accordance with legal compliance requirements.
• Legal authority: When required by Malaysian law, a court order, or to comply with a legitimate request from a law enforcement agency.

The bos67 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The following are the types of cookies used by bos67:

• Essential Cookies: Required for core bos67 platform functions such as login authentication, session security, and account balance management. These cookies cannot be disabled without affecting the platform's primary functionality.
• Performance Cookies: Collects information on how you use bos67 – the pages you visit most frequently, page response times, and any errors you encounter. All such information is anonymised and used solely to improve platform performance.
• Functional Cookies: Enables the bos67 platform to remember your preferences such as interface language, display settings and other personal configurations, providing a more personalised experience.
• Analytics Cookies: Helps bos67 understand overall platform usage patterns to make better-informed decisions about new feature development and user experience improvements.

You can manage and delete cookies at any time through your web browser settings. Keep in mind, however, that disabling certain cookies may affect the functionality of some parts of the bos67 platform. For more information on managing cookies, refer to the help guide for your web browser.

Bos67 implements a comprehensive range of technical and organisational security measures to protect your personal data from unauthorised access, alteration, accidental disclosure, or destruction:

• 256-bit SSL Encryption: All data transmitted between your device and bos67's servers is encrypted using 256-bit SSL – the highest security standard in the industry.
• Internal access controls: Access to users' personal data within the bos67 system is strictly limited to staff who require it to perform their duties, in accordance with the principle of least privilege.
• 24/7 Monitoring: A security monitoring system that operates around the clock to detect and respond to any suspicious activity or intrusion attempts in real time.
• Two-factor authentication: bos67 supports and encourages the use of two-factor authentication (2FA) to enhance the security of your account.
• Regular security audits: Independent security assessments are conducted periodically by external parties to identify and address any vulnerabilities within the bos67 system.
• Incident response plan: bos67 has a comprehensive security incident response plan in place to ensure any data security breaches are addressed swiftly and effectively.

Bos67 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to meet applicable legal and regulatory requirements. bos67's retention period guidelines are as follows:

Once the relevant retention period has elapsed, your data will be securely deleted or anonymized. bos67's data deletion procedures ensure that the data cannot be recovered or re-identified once the deletion process is complete.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and bos67's privacy policy, you have the following rights regarding your personal data:

• Right to Access: You have the right to request a copy of the personal data bos67 holds about you. bos67 will process data access requests within 21 business days.
• Right to Rectification: If you find that your personal data held in the bos67 system is inaccurate or out of date, you have the right to request a correction by submitting appropriate supporting documentation.
• Right to Erasure: Under certain circumstances, you may request the deletion of your personal data. However, we may be unable to fulfill such a request in full if the data is still required for legal compliance or other legitimate obligations.
• Right to Restrict Processing: You may request a restriction on the processing of your data under certain circumstances – for example, while bos67 is reviewing a complaint regarding the accuracy of your data.
• Right to Withdraw Consent: For data processed on the basis of your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal.
• Right to Lodge a Complaint: If you believe that bos67 has not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the rights mentioned above, please contact the bos67 team by email at support@bos67.best by stating the right you wish to exercise and the information required to verify your identity. bos67 will not charge a fee for processing reasonable requests relating to your personal data rights.

The bos67 platform is not intended for and is strictly prohibited from use by individuals under the age of 18. bos67 does not knowingly collect personal data from children or individuals who have not yet reached the age of 18.

If bos67 discovers that personal data belonging to an individual under the age of 18 has been collected inadvertently, we will take immediate action to delete that data and close the relevant account. If you believe that someone under the age of 18 has registered or is using the bos67 platform, please notify us promptly by email at support@bos67.best so that appropriate action can be taken.

Bos67 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or changes in the operation of the bos67 platform. When material amendments are made to this Privacy Policy, bos67 will notify you through one or more of the following methods: an in-platform notification when you log in to your bos67 account, an email to the address registered to your account, or a prominent notice on the bos67.best homepage.

The "Last Updated" date at the top of this document will be revised whenever amendments are made. We encourage you to review this Privacy Policy periodically to stay informed of how bos67 protects your personal data. Continued use of the bos67 platform after any amendments are published will be deemed acceptance of the revised privacy terms.

If you have any questions, concerns or complaints regarding this Privacy Policy or how bos67 handles your personal data, please contact us through any of the following channels:

• Email: support@bos67.best
• Live Chat: Available 24/7 via the Live Chat icon at the bottom corner of the bos67 platform
• WhatsApp: The bos67 support WhatsApp number listed in your account's support section

The bos67 team is committed to responding to all data privacy inquiries within 3 business days. For formal requests to exercise your personal data rights, the response period is up to 21 business days as stipulated under Malaysia's PDPA. If you are not satisfied with bos67's response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia for further action.