At Boss96, we take your privacy seriously. This Privacy Policy clearly explains how we collect, use, store, and protect your personal data as a member of our platform. This document has been prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and reflects Boss96's commitment to the security of member information.
This document contains 12 sections covers all aspects of Boss96's privacy.
Six core principles that guide how Boss96 handles the personal data of every Malaysian member.
All data transmitted between your device and Boss96's servers is protected with 256-bit SSL encryption — the same security technology used by Malaysia's major banks. Your data is never transmitted in readable form to any third party while in transit.
Boss96 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means we only collect data that is necessary, use it for the stated purposes, and give you full control over your own data.
Boss96 has never sold, and will never sell, members' personal data to any advertising company, data broker or unrelated third party. Your data belongs to you — it is not a Boss96 business asset to be traded.
Every Boss96 member has the right to access, amend, request a copy of, or request the deletion of their personal data at any time. The process is straightforward — simply contact the Boss96 support team and your request will be handled within 7 business days.
Member data is stored on secured servers with strict access controls. Only Boss96 staff who require access for customer service or technical operations purposes are permitted to view member data, and all access is recorded in an audit log.
In the event of any security incident involving member data, Boss96 is committed to notifying affected members within the timeframe required under the PDPA 2010 and taking immediate remedial action to minimize the impact on members.
This Privacy Policy explains in detail how Boss96 collecting, using, disclosing and protecting your personal information when you use our platform — including the boss96.best website and all related services. We respect every member's privacy and are committed to handling your personal data responsibly and transparently.
Boss96 is an online casino and Sports Betting platform operator based in Malaysia. We offer a full range of gaming services — including slots, Live Casino, baccarat, Sports Betting (covering the Malaysia Super League, EPL, badminton, and e-sports), and many other games — to registered members across Malaysia.
As a responsible platform operator, Boss96 recognizes how much privacy matters to Malaysian users and takes the necessary steps to ensure your personal data remains secure and is only used for legitimate, clearly stated purposes.
Boss96 only collects data that is necessary to deliver our services safely and effectively. Below are the categories of personal data we collect.
Boss96 does not collect biometric data (fingerprints, facial recognition), health data, or other sensitive data unrelated to platform use. MyKad numbers are only collected when required for identity verification during withdrawals that exceed a certain threshold, and are stored with additional encryption.
Boss96 collects personal data through several different channels, all of which occur with your knowledge.
Boss96 uses your personal data solely for the following legitimate, specific, and stated purposes. We do not use your data for any other purpose without first obtaining your consent.
| Purpose of Use | Legal Basis | Data Used |
|---|---|---|
| Identity verification & account registration | Contractual agreement | Name, phone number, date of birth |
| Processing deposits & withdrawals | Contractual agreement | Financial data, payment method information |
| Provision of gaming services | Contractual agreement | Activity data, game history |
| Security & fraud prevention | Legitimate interest | IP address, technical data, transaction history |
| Customer support | Contractual agreement | Account data, communication transcripts |
| Legal compliance & AML | Legal obligation | Identity data, transaction records |
| Promotional communications (with consent) | Member consent | Phone number, email |
| Platform improvements | Legitimate interest | Usage data, technical data without PII |
Boss96 does not sell members' personal data. We only share data under the limited circumstances outlined below, and only to the extent necessary for those purposes.
Boss96 signs a data processing agreement (DPA) with all third parties that receive member data, ensuring they are bound by security and privacy obligations equivalent to Boss96's own standards.
Boss96 continuously invests in security infrastructure to ensure that members' personal data is always protected to the highest achievable standard.
Boss96 does not retain members' personal data for longer than is necessary for the stated purpose or as required by Malaysian law.
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a Boss96 member hold the following rights in relation to your personal data. Boss96 is committed to respecting and facilitating the exercise of these rights.
You have the right to request a copy of the personal data Boss96 holds about you. Requests will be processed within 7 business days.
You have the right to request correction of any personal data that is inaccurate or incomplete. Updates can be made through your account settings or by contacting support.
You may request deletion of your personal data under certain circumstances, subject to applicable legal retention requirements.
You have the right to object to the processing of your personal data for direct marketing purposes at any time, with no penalty.
Under certain circumstances, you may request that Boss96 limit how we use your personal data while your request is being processed.
You may request Boss96 to provide your personal data in a machine-readable format for transfer to another service provider, should you wish to do so.
To exercise any of the above rights, contact Boss96's support team via live chat within your account or email support@boss96.best. Please include your account information and the specific right you wish to exercise. Boss96 will verify your identity before processing the request for security purposes and will respond within 7 business days.
Boss96 uses cookies and similar tracking technologies to enhance the user experience, maintain platform security and understand usage patterns in aggregate — not at an individual level.
Boss96 takes child protection and the safeguarding of minors extremely seriously. The Boss96 platform is strictly for adult users only.
Boss96 reserves the right to amend this Privacy Policy from time to time to reflect changes in our operations, new legal requirements or improvements to our data protection practices.
If you have any questions, concerns, or complaints about how Boss96 handles your personal data, we encourage you to reach out to us directly. Boss96 is committed to addressing every privacy inquiry seriously and promptly.
A brief overview of your personal data's journey from collection through to protection.
At every stage, your data is protected by Boss96's security policies and technology.
For many Malaysian users, data security concerns are a key factor in deciding whether or not to trust an online platform. And that concern is entirely reasonable — stories about data breaches and misuse of personal information have become all too common in the digital age. At Boss96, we understand these concerns and do not take them lightly.
When you register with Boss96 and make a deposit using Touch 'n Go eWallet or DuitNow, you are entrusting us with highly sensitive information — your phone number, financial details and activity patterns. We take that trust seriously. That is why Boss96 continuously invests in security infrastructure and ensures our team is trained to handle member data with the utmost responsibility.
Malaysia's Personal Data Protection Act 2010 (PDPA) is the primary legislation governing how organizations collect and use the personal data of Malaysians. Boss96 fully complies with all requirements of the PDPA 2010 — not merely to meet legal obligations, but because it is simply the right thing to do.
Under PDPA 2010, Boss96 as a data processor is obligated to collect data only for stated purposes, obtain clear consent before processing data for any new purpose, ensure data remains accurate and up to date, and provide individuals with access to their own data upon request. We take all of these obligations seriously.
Transparency is one of Boss96's core principles in data management. We never want our members wondering, "What is Boss96 doing with my data?" That is why this Privacy Policy is written in plain, easy-to-understand language — without convoluted legal jargon — and stated as clearly as possible.
When you play slots or place bets on a Malaysia Super League match at Boss96, your activity data is used only for specific purposes — processing transactions, maintaining account history for your own reference, and detecting suspicious activity to protect your account. This data is not shared with advertisers, not analyzed for commercial profiling without your consent, and not sold to any party.
For most Boss96 members, financial information is the most sensitive aspect of their privacy. When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX, you need confidence that this information is handled securely. Boss96 uses tokenisation for payment data — meaning your account number or card details are never stored directly in Boss96's systems. Instead, a unique secure token is used to process future transactions.
For withdrawals, Boss96 enforces a policy requiring that funds be returned only to the same payment method used for the original deposit. This policy not only protects Boss96 against fraud, but more importantly, it protects you from situations where someone who has gained unauthorised access to your account could withdraw funds to a different payment method.
Have questions about how Boss96 handles your personal data? We're here to help, 24 hours a day.
Boss96 protects all members' personal information using 256-bit SSL encryption and is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). We do not sell or share your data with third parties without your explicit consent. For privacy-related enquiries, contact us at support@boss96.best. For information on the platform's terms of use, please read Boss96 Terms & Conditions.
Your personal data is protected, your transactions are secure, and your rights are respected. Join over 100,000 active members who trust Boss96 as their preferred online gaming platform in Malaysia. Register for free in just 2 minutes today.
For players aged 18 and above only. Please gamble responsibly.