BOS138 Privacy Policy – Data Protection for Malaysian Players

1 Introduction & Scope of This Policy

BOS138 is an online entertainment platform operating at bos138.run, providing gaming services including slots, live casino, baccarat, roulette, lottery, sports, and instant games to Malaysian players. We understand that your personal information is valuable and sensitive, and we take this responsibility very seriously.

This Privacy Policy applies to all information we collect through the BOS138 platform, including when you register an account, make deposits or withdrawals via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay or FPX, play our games, contact customer support, or browse the platform without registering. This Policy also applies to information you voluntarily provide, such as feedback or participation in promotions.

2 Types of Personal Data We Collect

BOS138 only collects data that is strictly necessary to deliver a safe, fair, and responsible service. The categories of data we collect are as follows:

Identity Information:

• Full name as shown on official identification document
• MyKad or passport number — for identity verification purposes only
• Date of birth — to verify that you are at least 18 years of age
• Gender

Contact Information:

• An active Malaysian mobile phone number
• A valid email address
• State of residence in Malaysia

Financial & Transaction Information:

• Records of all deposits and withdrawals, including dates, amounts in Malaysian Ringgit (RM) and payment methods used
• Bank account or digital wallet details registered for withdrawals (we do not store full account numbers — only the last few digits for reference)
• Complete transaction history within your BOS138 account

Game Activity Information:

• Records of games played, bets placed and game outcomes
• Bonus and promotion claim history
• Deposit limits, loss limits, and session time limits that you have activated
• Customer support interaction records

Technical Information:

• The IP address of your device when accessing the platform
• Web browser type and operating system used
• Access timestamps and gameplay session logs
• Cookie data and related tracking technologies (see Section 7)

3 How We Collect Data

BOS138 collects personal data through several different methods:

• Account registration: You provide information directly when completing the registration form at bos138.run.
• Platform usage: Game activity and transaction data are collected automatically while you use the BOS138 platform.
• Identity verification: You may be asked to upload a copy of your identification document for KYC (Know Your Customer) verification purposes when withdrawals exceed a certain threshold.
• Customer support: Information you provide when contacting our support team via live chat or email is stored for reference and service improvement purposes.
• Cookies and web technologies: The bos138 platform uses cookies and similar tracking technologies to enhance the user experience and platform security.
• Approved third parties: In certain situations, we may receive information from payment providers such as DuitNow or GrabPay for transaction verification purposes.

4 Purpose of Personal Data Use

BOS138 uses your personal data solely for legitimate purposes directly related to the provision of our services. The primary purposes are as follows:

• Account management: Creating, verifying, and managing your bos138 account, including the login process, password changes, and updates to personal information.
• Provision of gaming services: Enabling you to access and play all games available on the BOS138 platform, including slots, Live Casino, lottery, and Sports Betting.
• Payment processing: Processing deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX, as well as withdrawals to your bank account or digital wallet.
• Identity verification (KYC): Meeting legal requirements to verify player identity, particularly for large withdrawals and anti-money laundering purposes.
• Fraud prevention: Detecting and investigating suspicious activity, including multiple account usage, bonus abuse, and any form of fraud that affects other players or the platform.
• Customer support: Providing accurate and effective assistance whenever you contact the BOS138 support team.
• Responsible gaming: Monitoring gameplay patterns to identify players who may need responsible gaming support and to activate limits you have set yourself.
• Legal compliance: Fulfilling legal obligations, including compliance with Malaysia's PDPA 2010 and anti-money laundering requirements.
• Platform improvements: Analysing aggregated (non-individual) usage patterns to improve user experience, platform speed, and game selection.
• Service communications: Sending important account-related notifications such as deposit confirmations, withdrawal alerts, and security updates.

If BOS138 wishes to use your data for purposes beyond those stated above — such as direct marketing — we will seek your explicit consent beforehand, and you have the right to decline without any impact on your use of the platform.

5 Data Sharing with Third Parties

BOS138 does not sell, rent, or transfer players' personal data to third parties for marketing or commercial purposes. However, in the following limited situations, we may need to share your data:

• Payment providers: Minimum transaction information is shared with payment providers such as DuitNow processors, GrabPay, or FPX solely to process your deposits and withdrawals. These providers are bound by their own privacy policies and security standards.
• IT and security service providers: Third parties that assist BOS138 with the technical operation of the platform — such as server hosting services and fraud detection systems — may process data to a limited extent under strict confidentiality agreements.
• Game providers: Third-party game providers, such as slots and Live Casino providers, may receive minimal session data for technical purposes and game audit compliance.
• Authorities and regulatory bodies: BOS138 will disclose personal data if required by Malaysian law, a court order or a lawful directive from a relevant authority.
• Fraud prevention and anti-money laundering: In cases where we suspect illegal activity, relevant information may be shared with law enforcement authorities in accordance with our legal obligations.

6 Data Storage & Security

BOS138 implements comprehensive technical and organisational security measures to protect players' personal data from unauthorised access, modification, disclosure, or destruction.

Technical security measures we have implemented:

• 256-bit SSL encryption for all data transmitted between your device and BOS138's servers
• Passwords are stored using a strong one-way hashing algorithm — BOS138 cannot view your actual password
• Two-factor authentication (2FA) is available and recommended for all accounts
• Intrusion detection system and 24-hour security monitoring
• Regular vulnerability scans and penetration testing
• Strict access controls — only staff who require access to specific data to perform their duties are authorised

Data retention period: BOS138 retains your personal data for as long as your account remains active and for the period required by law following account closure — typically five years for financial records in accordance with Malaysian legal requirements. Data that is no longer needed will be securely deleted or anonymised.

7 Cookies & Tracking Technologies

The BOS138 platform uses cookies and similar tracking technologies to enhance the user experience, maintain security and analyse platform usage patterns.

Types of cookies we use:

• Essential Cookies: Required for the platform to function properly — including login session management and security settings. These cookies cannot be disabled without affecting the platform's core functionality.
• Preference Cookies: Saving your preferences such as interface language and display settings to provide a more personalised experience.
• Analytics Cookies: Collecting aggregated information on how players use the platform to help us improve and optimise the user experience. This data is anonymised and cannot be attributed to any specific individual.
• Security Cookies: Helping us detect suspicious activity, prevent fraud, and protect player accounts from unauthorised access.

Most web browsers allow you to control cookies through your browser settings. However, disabling certain cookies may affect the functionality of the BOS138 platform. For more information on managing cookies, please refer to your web browser's help section.

8 Player Rights Regarding Personal Data

As a registered BOS138 player, you have the following rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Right of Access: You have the right to request a copy of the personal data we hold about you. This request can be made through BOS138 support and will be processed within 14 business days.
• Right to Correction: If your personal data is inaccurate or out of date, you have the right to request a correction. Basic details such as your phone number and email address can be updated directly through your account settings.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. However, this right is subject to our legal obligations to retain certain records, such as financial transaction records.
• Right to Object: You have the right to object to the processing of your data for certain purposes such as direct marketing. To opt out of marketing communications, you can update your communication preferences in your account settings.
• Right to Data Portability: You have the right to receive a copy of the data you have provided to us in a machine-readable format, so that it can be transferred to another service should you wish.
• Right to Restrict Processing: In certain situations, such as when there is a dispute regarding the accuracy of your data, you may request that we restrict how we use your data.

To exercise any of the rights above, please contact the BOS138 support team via live chat or email at support@bos138.run. We will respond to all privacy rights requests within 14 business days. In complex cases, this period may be extended to up to 30 business days, with notice provided to you.

9 Children's Privacy

The bos138 platform is strictly for individuals aged 18 and above. bos138 expressly prohibits the registration or use of the platform by minors.

We do not knowingly collect personal data from individuals under the age of 18. Should we discover that personal data belonging to a minor has been collected without proper knowledge or age verification, we will take immediate steps to delete that data and close the account in question.

If you are a parent or guardian who believes your child has registered an account with BOS138, please contact us immediately at support@bos138.run so we can take the appropriate action.

10 Amendments to This Privacy Policy

BOS138 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new technologies, legal requirements, or other operational reasons.

When we make material changes to this Privacy Policy, we will notify you via a prominent notice on the bos138 platform and/or by email to the address registered to your account, at least seven days before the changes take effect. The date of the most recent update will always be displayed at the top of this document.

Continued use of the BOS138 platform after any amendment takes effect constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account by contacting our support team.

11 Contact Us about Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how BOS138 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the live chat icon on the BOS138 platform. Our Bahasa Malaysia-fluent support team is ready to assist with any privacy-related enquiries.
• Email: support@bos138.run — for privacy enquiries that require more detailed discussion or relate to data access rights.

We are committed to responding to all privacy-related enquiries within three business days for general queries, and within 14 business days for formal requests relating to personal data rights.

If you are not satisfied with BOS138's response to your privacy enquiry, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory body under applicable Malaysian law.