Updated: January 2026

Boss8 Privacy Policy – Personal Data Protection for Malaysian Members

Boss8 takes your privacy seriously. This policy clearly explains what data we collect, how it is used, who can access it, and your rights as a Malaysian member to control your own personal information.

Effective: 1 January 2026 Language: Malay
256
bit SSL Encryption
0
Data Sold to Third Parties
24/7
Security Monitoring
7
Member Personal Rights
48h
Enquiry Response Time

This Privacy Policy ("Policy") describes how Boss8 ("we", "the platform") collects, processes, stores, and protects your personal information when you use the boss8.click website and all related services. We are committed to safeguarding your privacy at all times, in line with international data protection standards. By registering for or using Boss8, you agree to the terms of this Privacy Policy.

01Personal Information We Collect

Boss8 only collects information necessary to provide Malaysian members with a safe, efficient, and high-quality service. Below are the categories of data we collect:

A. Account Registration Information

  • Full name as it appears on your identification card.
  • A valid and active Malaysian phone number.
  • Email address used for account communications.
  • Account password (stored in encrypted form — we cannot view your original password).
  • Date of birth for minimum age eligibility verification (18 years and above).

B. Financial & Transaction Information

  • EWallet account numbers used — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow.
  • Banking account details for withdrawals via FPX (Maybank2u, CIMB Clicks).
  • Records of all deposit and withdrawal transactions, including amounts, dates and times.
  • Betting activity records for account management and regulatory compliance purposes.

C. Technical & Usage Information

  • Your device's IP address at the time of accessing Boss8.
  • Device type, operating system, and web browser used.
  • Login session data, including the date, time, and location (city/state) of each login.
  • In-platform usage data — pages visited, games played, and session duration.
  • Cookie data and other tracking technologies — explained further in Section 5.
Boss8 will never ask for your full identification number, full bank account number, or excessive sensitive information via live chat or email. If you receive such a request from anyone claiming to represent Boss8, do not comply and report it to us immediately.

D. Identity Verification Information (KYC)

In certain circumstances — particularly for withdrawals exceeding specific thresholds or when suspicious activity is detected — boss8 may request additional identity verification documents such as a copy of your identification card or a recent bank statement. These documents are processed securely and retained in accordance with KYC (Know Your Customer) procedures as required by the relevant regulatory authority.

02How Boss8 Uses Your Personal Data

Every piece of data boss8 collects is used for a specific and legitimate purpose. We do not use your data for any purpose not stated in this Policy without obtaining fresh consent from you.

Purpose of Use Data Used Legal Basis
Account management & verification Name, phone number, email, date of birth Contractual Agreement
Deposit & withdrawal processing EWallet & banking details, transaction records Contractual Agreement
Fraud prevention & AML compliance Transaction records, IP, gaming activity Legal Obligation
Service & platform improvements Usage data, technical data Legitimate Interest
Account & security communications Email, phone number Contractual Agreement
Boss8 marketing & promotional communications Email, phone number Member Consent
Responsible gaming & member protection Gaming activity records, set limits Public Interest

You may opt out of receiving marketing communications from Boss8 at any time via the unsubscribe link in our emails or by contacting us directly at support@boss8.click. This preference does not affect important communications related to your account management and security.

03Sharing Data with Third Parties

Boss8 does not sell, rent, or transfer your personal data to any third party for marketing purposes. This is our absolute commitment. That said, there are certain categories of parties that may access your data in a legitimate and limited context:

Clear Guarantee: boss8 NEVER sells members' personal data to advertisers, marketing companies, or data brokers. Your data belongs to you — we hold it solely on your behalf for platform operational purposes.

Categories of third parties that may have limited access to your data:

  • Payment Providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX partner banks receive the transaction information required to process your deposits and withdrawals. This data is transmitted through secure, encrypted channels.
  • Game Provider: Live casino studios and slot providers such as Evolution Gaming and Pragmatic Play may receive a Boss8 member ID (not full personal details) for the purposes of gaming sessions and technical dispute resolution.
  • Cloud Services & Infrastructure: boss8 uses internationally accredited cloud service providers for data hosting. All data is stored in an encrypted environment protected by strict access controls.
  • Regulatory Body & Law Enforcement: Boss8 complies with lawful requests from licensed regulatory bodies and legitimate law enforcement agencies. We only disclose the minimum information required, and only where there is a solid legal basis for doing so.
  • Fraud Prevention Services: boss8 uses third-party services to detect and prevent account fraud. Limited technical information such as IP addresses may be shared in this context.

All third-party providers working with boss8 are bound by strict confidentiality agreements and may only use the data they access solely for the purposes specified in those agreements.

04Boss8 Data Security & Protection Measures

Boss8 invests seriously in data security infrastructure to ensure your personal and financial information is protected at all times. The following are the security layers we employ:

  • 256-bit SSL Encryption: All data transmitted between your device and Boss8's servers is protected by 256-bit SSL encryption — the same standard used by leading Malaysian banking institutions such as Maybank and CIMB. This means that any information sent cannot be read by any party that intercepts the communication.
  • Encrypted Password: Your account password is never stored in plain text. It undergoes an irreversible cryptographic hashing process — even the Boss8 team itself cannot view your original password.
  • Fund Segregation: Member deposit funds are held in an account separate from Boss8's operational company account. This ensures your funds remain safe and are not affected by any operational issues the company may face.
  • 24/7 Security Monitoring: boss8's automated monitoring system operates around the clock to detect suspicious activity, such as login attempts from unusual locations or abnormal transaction patterns.
  • Two-Factor Authentication (2FA): Boss8 offers two-factor authentication as an added layer of protection for your account. We encourage all members to enable this feature in their account settings.
  • Regular Security Audits: Independent security audits are conducted periodically by qualified third parties to identify and address any potential vulnerabilities before they can be exploited.
While boss8 takes all reasonable precautions, no security system can guarantee 100% absolute protection. You also play an important role by keeping your account password confidential and not sharing your login credentials with anyone.

05Cookies & Tracking Technologies

Boss8 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how the platform is used. Below are the types of cookies we use:

  • Essential Cookies (Required): Required for core platform functionality — login, session verification, bet slip management and security. These cookies cannot be disabled without affecting the basic operation of Boss8.
  • Functional Cookies: Stores your preferences such as selected language, favourite games, and display settings. Allows Boss8 to remember your choices across different sessions.
  • Analytics Cookies: Helps us understand how platform pages are used — which games are most popular, user navigation flows and areas that may require improvement. This data is collected in aggregate form and does not identify individuals.
  • Security Cookies: Used to detect suspicious login attempts, monitor unusual usage patterns, and protect your account from unauthorised access.

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect your ability to use Boss8 to its full extent. For guidance on managing cookies in your browser, refer to your browser's help documentation.

06Data Storage & Retention Period

Boss8 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law and regulatory obligations.

  • Active Account Information: Retained for the duration your Boss8 account remains active, plus the minimum retention period required under AML and KYC regulations.
  • Financial Transaction Records: Retained for a minimum of 5 years after the transaction date, in line with financial compliance and audit requirements.
  • Security & Activity Logs: Retained for 12 months for fraud detection and dispute resolution purposes.
  • Marketing Data: Retained until you withdraw your consent to receive marketing communications.
  • KYC Documents: Retained for the period stipulated by the regulatory body that issued Boss8's operating licence.

When data is no longer needed and there is no legal obligation to retain it, Boss8 will securely delete or anonymise that data using approved procedures.

07Your Rights as a Boss8 Member

As a Boss8 member accessing the platform from Malaysia, you have the following rights regarding your personal data. We fully respect and uphold these rights:

Right of Access: You have the right to request a copy of the personal data we hold about you. Such requests will be processed within 30 business days.
Right to Rectification: If any information we hold is inaccurate or out of date, you have the right to request an immediate correction through your account settings or by contacting us directly.
Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data. Please note, however, that certain data must be retained to fulfil legal obligations.
Right to Restriction of Processing: Under certain circumstances, you may request Boss8 to restrict how your data is processed while a dispute or review is pending resolution.
Right of Objection: You may object to the processing of your data for direct marketing purposes at any time. Such requests will be actioned immediately.
Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider should you choose to do so.
Right to Withdraw Consent: For data processing based on your consent (such as marketing), you may withdraw that consent at any time without affecting your core boss8 services.

To exercise any of the rights above, contact us at support@boss8.click stating your request and your Boss8 account details. We will respond within 48 hours and resolve your request within the timeframe required by applicable law.

08Children's Data

Boss8 is a platform intended exclusively for adults aged 18 and above. We do not knowingly collect, process, or store any personal data from individuals under the age of 18.

If we discover that we have inadvertently collected data from someone under the age of 18, the account will be closed immediately and all associated data will be securely deleted within 72 hours. The original deposit amount will be refunded through an appropriate method.

Parents or guardians who suspect their child may have registered at Boss8 without their knowledge are welcome to contact us immediately at support@boss8.click. We will take prompt action to resolve the situation.

09Changes to This Privacy Policy

Boss8 reserves the right to update this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or improvements to boss8's services.

When material changes are made to this Policy:

  • You will be notified via the email registered with Boss8 at least 14 days before the changes take effect.
  • A notice will be displayed on the Boss8 homepage for a minimum period of 7 days.
  • The "Updated" date at the top of this page will be revised to reflect the latest version.

Continued use of the Boss8 platform after a change takes effect will be considered your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account before the effective date.

Previous versions of this Privacy Policy are available upon request — contact support@boss8.click if you require a copy of a specific version for reference purposes.

10Contact Us About Data Privacy

For any enquiries, concerns, or requests regarding your data privacy at boss8, you may reach us through the following channels:

  • Privacy Email: support@boss8.click (please indicate "Data Privacy Enquiry" in the email subject line)
  • Live Chat: Available 24/7 via the chat icon at the bottom corner of the boss8 page
  • Response Time: Privacy inquiries will be responded to within 48 business hours

When contacting us regarding your personal data, please include your Boss8 account number (if applicable), a clear description of your request, and your contact details so we can respond. This helps us process your request faster and more accurately.

The Boss8 support team is fully proficient in Bahasa Malaysia. There is no need to worry about language barriers — send your enquiry in Bahasa Malaysia and we will respond in Bahasa Malaysia as well.

Why Is Your Privacy Safe at Boss8?

Six concrete reasons why Malaysian members can trust Boss8 with their personal data.

🚫
Your Data Is Never Sold

Boss8 does not sell, rent, or transfer members' personal data to advertisers, data brokers, or any third party for marketing purposes. This is not merely a promise — it is a commitment embedded in our company's operational policies.

Data Sold to Third Parties0%
🏦
Funds Held Separately

Your deposits are held in an account that is kept separate from boss8's operational accounts. This goes beyond financial security — it also means your transaction records are easier to verify and better protected in the event of a dispute or audit.

Segregated Account Clean Record
⚙️
Privacy Controls in Your Hands

From your boss8 account settings, you can manage your marketing communication preferences, request a copy of your data, enable 2FA, and manage other privacy settings — all without needing to contact support. The controls are entirely in your hands.

Self-Managed Privacy Controls100%
🔍
Periodic Independent Security Audits

Boss8's data protection systems are periodically reviewed by independent third-party information security experts. These audits ensure our data protection practices remain aligned with the latest industry standards and that no vulnerabilities go unaddressed.

Independent Audit Latest Standards
💬
Privacy Support in Bahasa Melayu

For any questions about your personal data, the Boss8 support team is available in Bahasa Melayu via 24/7 live chat or email. You won't have to struggle with confusing technical language — we'll explain everything in terms you can understand.

Privacy Inquiry Response Time< 48 Hours

Understanding Data Privacy on Online Betting Platforms — A Guide for Malaysian Players

In the world of online betting platforms, data privacy is a topic many players overlook until something goes wrong. Boss8 believes that Malaysian players deserve a clear understanding of what happens to their personal information when they sign up and play on any online platform — including Boss8.

When you register with Boss8 using your Malaysian phone number and verify via Touch 'n Go or DuitNow, you provide the platform with certain personal information. This is an unavoidable requirement for any legitimate online financial service — without identity verification, there is no reliable way to protect your account or ensure that withdrawn funds reach the right person. What matters is understanding what the platform does with that information once you've provided it.

Why Does boss8 Need Your Phone Number and eWallet Information?

Boss8 requires your Malaysian phone number for three key reasons. First, it is the fastest way to verify that you are a real person in Malaysia and not an automated bot. Second, it allows boss8 to send you important security alerts — such as notifications when your account is accessed from a new device. Third, it makes customer service communication more convenient, as many members prefer to be reached via messaging rather than email.

EWallet details such as Touch 'n Go or GrabPay are collected solely to process your deposits and withdrawals. Boss8 does not store full card numbers or sensitive eWallet information in our systems — financial data is transmitted through secure payment channels, and only transaction reference numbers are retained in our records for audit and dispute resolution purposes.

Game Activity Data — What Boss8 Records and Why

Every bet you place on Boss8 — whether at a live baccarat table, on Pragmatic Play slots, in Malaysia Super League football markets, or on MLBB esports — is recorded in our system. This may sound concerning, but it actually works in your favour. These records serve as evidence should you need to dispute an uncredited winning payout, retrieve your betting history for personal budget management purposes, or as part of a responsible gambling process where you request Boss8 to monitor your betting patterns.

Gaming activity data also allows Boss8 to proactively identify signs that a member may be experiencing problem gambling — such as a sudden increase in bet sizes or excessively long gaming sessions. This is part of Boss8's commitment to member wellbeing, not just profitability. This information is never used for marketing purposes or sold to third parties.

Practical Steps to Protect Your Boss8 Account

While Boss8 invests heavily in data security infrastructure, protecting your account also depends on your own actions. Here are some practical steps Boss8 recommends to all Malaysian members: Use a unique password for your Boss8 account — do not reuse the same password you use for Maybank2u or your eWallet. Enable two-factor authentication (2FA) in your account settings for an extra layer of protection. Avoid logging in to your Boss8 account from public devices or public WiFi networks without a VPN. Always log out of your Boss8 account after each session, especially when using a shared device.

One of the most common causes of account access loss is phishing — where fraudsters send messages that appear to come from Boss8 but are actually designed to steal your login credentials. Boss8 will never ask for your account password via WhatsApp, SMS or email. If you receive any such message, do not comply and report it to the Boss8 support team immediately.

FAQ – boss8 Privacy Policy

Quick answers to the most frequently asked questions about data privacy at Boss8.

Yes, you have the right to request the deletion of your personal data under the "right to be forgotten". Submit your request to support@boss8.click, stating your account details and the deletion request. Please note that certain data — particularly financial transaction records and KYC information — must be retained to fulfil legal obligations such as AML requirements for the period stipulated by regulators, typically a minimum of 5 years. Other data not subject to such obligations will be deleted within 30 business days of receiving your request.

No, your betting activity records are confidential and are not shared with any third party for marketing, public analytics, or any other purpose outside of platform operations. Game providers such as live casino studios only receive the session ID required to run the game — they do not receive your full name, financial details, or complete betting history. Betting information may be disclosed to licensed regulatory bodies or legitimate law enforcement agencies where there is a compelling legal requirement.

There are two easy ways to stop receiving promotional emails from Boss8. First, click the "Unsubscribe" link found at the bottom of any promotional email you receive. Second, log in to your Boss8 account, go to Account Settings, and select the Communication Preferences section to uncheck the communication categories you no longer wish to receive. Unsubscribe requests are processed within 48 hours. Please note that even after opting out of promotions, you will still receive important account-related emails such as deposit confirmations, withdrawal notifications, and security alerts.

When you close your boss8 account, your personal data is not deleted immediately, as there are legal obligations that require boss8 to retain certain records for a specified period. Financial transaction records are kept for a minimum of 5 years in accordance with AML regulations. Basic identity information is retained for the period required by regulators. Once the mandatory retention period has elapsed, your data will be securely deleted or anonymised. You will not receive any marketing communications after account closure, except for essential communications directly related to the closure itself.

No, Boss8 does not store your full eWallet or banking account details in our system. When you make a deposit via Touch 'n Go, GrabPay, DuitNow, or FPX, your payment information is processed directly through the respective provider's secure payment gateway. Boss8 only receives and retains the transaction reference number, amount, and date/time — not your full account number or sensitive financial details. This is standard security practice in the online payments industry.

Trusted Data Protection at Boss8

Every layer of Boss8's data protection is built with one goal in mind — complete security for Malaysian members.

256-bit SSL
Data Not Sold
Secure KYC
Independent Audit
Encrypted Password
24/7 Support
Important Notice Regarding This Boss8 Privacy Policy

This Privacy Policy forms part of the overall agreement between you and Boss8. It should be read together with Terms & Conditions Boss8. By using this platform, you confirm that you have read and understood how Boss8 handles your personal data. This Policy takes effect from 1 January 2026 and supersedes all previous versions.

For privacy-related enquiries, email us at support@boss8.click. For information on responsible gaming, visit the Responsible Gaming us.

Your Data Is Safe at boss8 — Play with Complete Peace of Mind

Your privacy is Boss8's priority. Register an account today, claim a 150% welcome bonus of up to MYR 1,500 and enjoy a safe, protected gaming experience alongside more than 250,000 Malaysian players.

SSL 256-bit — Data secured No data sold Deposit via Touch 'n Go & DuitNow 24/7 Bahasa Malaysia Support
Bahasa Melayu